PT-2025-23468 · Qualcomm · Qualcomm Snapdragon

Published

2025-01-24

·

Updated

2025-11-06

·

CVE-2025-21479

CVSS v3.1
8.6
VectorAV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Qualcomm chipsets (affected versions not specified)
Description A memory corruption issue exists due to unauthorized command execution within the GPU micronode when processing a specific sequence of commands. This issue has been actively exploited in the wild. The GPU microcode is shared across multiple products, including IoT devices, phones, laptops, and potentially future automotive systems.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

LPE

Incorrect Authorization

Weakness Enumeration

Related Identifiers

BDU:2025-06374
CVE-2025-21479

Affected Products

Qualcomm Snapdragon