CVE-2025-21480

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

Please check with specific vendors (OEMs,) for information on patching status. For more information, please see: https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-21480

Remediation deadline: June 24, 2025

Description

Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

Timeline

Published:June 3rd, 2025 12:00 AM

Last modified:June 3rd, 2025 12:00 AM

Added to KEV:June 3rd, 2025

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Qualcomm

Products

Multiple Chipsets

Weaknesses (CWE)

CWE-863

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute