PT-2025-23506 · Qualcomm · Qualcomm Chipsets
Published
2025-01-24
·
Updated
2025-07-08
·
CVE-2025-21480
CVSS v3.1
8.6
8.6
High
Base vector | Vector | AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Qualcomm Multiple Chipsets (affected versions not specified)
NVIDIA GPU (affected versions not specified)
Description:
The issue is related to memory corruption due to unauthorized command execution in the GPU micronode while executing a specific sequence of commands. This can allow an attacker to execute arbitrary commands. The vulnerability is being actively exploited. There is a high risk of exploitation, and it is recommended to secure systems as soon as possible.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Incorrect Authorization
Weakness Enumeration
Related Identifiers
BDU:2025-06405
CVE-2025-21480
Affected Products
Qualcomm Chipsets
References · 30
- https://nvd.nist.gov/vuln/detail/CVE-2025-21480 · Security Note
- https://bdu.fstec.ru/vul/2025-06405 · Security Note
- https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html · Vendor Advisory
- https://twitter.com/gbhackers_news/status/1929577395461222490 · Twitter Post
- https://reddit.com/r/CVEWatch/comments/1l3xv0b/top_10_trending_cves_05062025 · Reddit Post
- https://twitter.com/xvonfers/status/1929531533087445253 · Twitter Post
- https://twitter.com/ScyScan/status/1930747778659152264 · Twitter Post
- https://twitter.com/transilienceai/status/1942463654709932241 · Twitter Post
- https://twitter.com/CveFindCom/status/1929782666112414169 · Twitter Post
- https://reddit.com/r/Action1/comments/1l859nk/todays_patch_tuesday_overview_66_vulnerabilities · Reddit Post
- https://twitter.com/BaseFortify/status/1929886672948216122 · Twitter Post
- https://twitter.com/dCypherIO/status/1929870723713011946 · Twitter Post
- https://t.me/true_secator/7100 · Telegram Post
- https://t.me/cvetracker/25240 · Telegram Post
- https://twitter.com/CISACyber/status/1929958122619097502 · Twitter Post