PT-2025-23506 · Qualcomm · Qualcomm Chipsets

Published

2025-01-24

·

Updated

2025-07-08

·

CVE-2025-21480

CVSS v3.1
8.6
VectorAV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions:

Qualcomm Multiple Chipsets (affected versions not specified)

NVIDIA GPU (affected versions not specified)

Description:

The issue is related to memory corruption due to unauthorized command execution in the GPU micronode while executing a specific sequence of commands. This can allow an attacker to execute arbitrary commands. The vulnerability is being actively exploited. There is a high risk of exploitation, and it is recommended to secure systems as soon as possible.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

Related Identifiers

BDU:2025-06405
CVE-2025-21480

Affected Products

Qualcomm Chipsets