CVE-2025-21474 | Qualcomm Snapdragon Auto FastConnect 6800 up to WSA8830 A2dp Sink Command Queue use after free
A vulnerability categorized as critical has been discovered in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile and Snapdragon Wearables. Affected by this issue is some unknown functionality of the component A2dp Sink Command Queue. Executing manipulation can lead to use after free.
This vulnerability is tracked as CVE-2025-21474. The attack is restricted to local execution. No exploit exists.
It is advisable to upgrade the affected component.