What’s Vulnerable › Vulnerabilities

CVE-2025-21480: Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

• Severity: high (CVSS 8.6 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2025-06-03
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-03 · updated 2026-06-17
• Weakness: CWE-863

Description

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

Affected products

• Qualcomm Aqt1000 Firmware: all versions
• Qualcomm Fastconnect 6200 Firmware: all versions
• Qualcomm Fastconnect 6700 Firmware: all versions
• Qualcomm Fastconnect 6800 Firmware: all versions
• Qualcomm Fastconnect 6900 Firmware: all versions
• Qualcomm Fastconnect 7800 Firmware: all versions
• Qualcomm Qca6391 Firmware: all versions
• Qualcomm Qcm4490 Firmware: all versions
• Qualcomm Qcs4490 Firmware: all versions
• Qualcomm Sc8380Xp Firmware: all versions
• Qualcomm Sd855 Firmware: all versions
• Qualcomm Sm4635 Firmware: all versions
• Qualcomm Sm6250 Firmware: all versions
• Qualcomm Sm6650 Firmware: all versions
• Qualcomm Sm6650P Firmware: all versions
• Qualcomm Sm7325P Firmware: all versions
• Qualcomm Sm7635 Firmware: all versions
• Qualcomm Sm7675 Firmware: all versions
• Qualcomm Sm7675P Firmware: all versions
• Qualcomm Sm8550P Firmware: all versions
• Qualcomm Sm8635 Firmware: all versions
• Qualcomm Sm8635P Firmware: all versions
• Qualcomm Sm8650Q Firmware: all versions
• Qualcomm Snapdragon 460 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 480+ 5G Mobile Platform (Sm4350-Ac) Firmware: all versions
• Qualcomm Snapdragon 480 5G Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 4 Gen 1 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 662 Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 680 4G Mobile Platform Firmware: all versions
• Qualcomm Snapdragon 685 4G Mobile Platform (Sm6225-Ad) Firmware: all versions

References

• https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-21480

Get alerted when CVE-2025-21480 or the next vulnerability affects your stack