PT-2025-23468 · Qualcomm · Qualcomm Snapdragon

Published

2025-01-24

·

Updated

2025-08-06

·

CVE-2025-21479

CVSS v3.1
8.6
VectorAV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions:

Qualcomm Snapdragon GPU (affected versions not specified)

Description:

The issue is related to memory corruption due to unauthorized command execution in the GPU micronode while executing a specific sequence of commands. This is caused by insufficient authorization mechanisms in the GPU microcode. The vulnerability can be exploited by sending a sequence of specially crafted commands, potentially allowing an attacker to cause memory damage.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

Related Identifiers

BDU:2025-06374
CVE-2025-21479

Affected Products

Qualcomm Snapdragon