CVE-2025-21483

Successful exploitation can corrupt memory in affected low-level Qualcomm communication firmware and may permit arbitrary code execution. Compromise of this firmware-level component could provide an attacker with highly privileged execution and reduce the effectiveness of operating-system security controls.

Prioritize patching exposed and high-value devices. Until updates are deployed, reduce processing of untrusted RTP multimedia traffic where operationally feasible, restrict unpatched devices from sensitive environments and networks, and use network monitoring to identify anomalous or malformed RTP traffic directed at affected devices.

Install the latest Qualcomm security updates referenced in the September 2025 Qualcomm Security Bulletin, through the applicable device manufacturer or carrier firmware release. For Android devices, apply the September 2025 Android security update, preferably security patch level 2025-09-05 or later where available.