CVE-2025-21480

Unknown Unknown - Not Provided

BaseFortify

Publication date: 2025-06-03

Last updated on: 2025-10-28

Assigner: Qualcomm, Inc.

Description

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-06-03

Last Modified

2025-10-28

Generated

2026-11-12

AI Q&A

2025-06-03

EPSS Evaluated

2026-11-10

NVD

CVE-2025-21480

Affected Vendors & Products

Vendor	Product	Version / Range
qualcomm	aqt1000_firmware	*
qualcomm	aqt1000	*
qualcomm	fastconnect_6200_firmware	*
qualcomm	fastconnect_6200	*
qualcomm	fastconnect_6700_firmware	*
qualcomm	fastconnect_6700	*
qualcomm	fastconnect_6800_firmware	*
qualcomm	fastconnect_6800	*
qualcomm	fastconnect_6900_firmware	*
qualcomm	fastconnect_6900	*
qualcomm	fastconnect_7800_firmware	*
qualcomm	fastconnect_7800	*
qualcomm	qca6391_firmware	*
qualcomm	qca6391	*
qualcomm	qcm4490_firmware	*
qualcomm	qcm4490	*
qualcomm	qcs4490_firmware	*
qualcomm	qcs4490	*
qualcomm	sc8380xp_firmware	*
qualcomm	sc8380xp	*
qualcomm	sd855_firmware	*
qualcomm	sd855	*
qualcomm	sm4635_firmware	*
qualcomm	sm4635	*
qualcomm	sm6250_firmware	*
qualcomm	sm6250	*
qualcomm	sm6650_firmware	*
qualcomm	sm6650	*
qualcomm	sm6650p_firmware	*
qualcomm	sm6650p	*
qualcomm	sm7325p_firmware	*
qualcomm	sm7325p	*
qualcomm	sm7635_firmware	*
qualcomm	sm7635	*
qualcomm	sm7675_firmware	*
qualcomm	sm7675	*
qualcomm	sm7675p_firmware	*
qualcomm	sm7675p	*
qualcomm	sm8550p_firmware	*
qualcomm	sm8550p	*
qualcomm	sm8635_firmware	*
qualcomm	sm8635	*
qualcomm	sm8635p_firmware	*
qualcomm	sm8635p	*
qualcomm	sm8650q_firmware	*
qualcomm	sm8650q	*
qualcomm	snapdragon_4_gen_1_mobile_platform_firmware	*
qualcomm	snapdragon_4_gen_1_mobile_platform	*
qualcomm	snapdragon_460_mobile_platform_firmware	*
qualcomm	snapdragon_460_mobile_platform	*
qualcomm	snapdragon_480_5g_mobile_platform_firmware	*
qualcomm	snapdragon_480_5g_mobile_platform	*
qualcomm	snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)_firmware	*
qualcomm	snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)	*
qualcomm	snapdragon_662_mobile_platform_firmware	*
qualcomm	snapdragon_662_mobile_platform	*
qualcomm	snapdragon_680_4g_mobile_platform_firmware	*
qualcomm	snapdragon_680_4g_mobile_platform	*
qualcomm	snapdragon_685_4g_mobile_platform_\(sm6225-ad\)_firmware	*
qualcomm	snapdragon_685_4g_mobile_platform_\(sm6225-ad\)	*
qualcomm	snapdragon_690_5g_mobile_platform_firmware	*
qualcomm	snapdragon_690_5g_mobile_platform	*
qualcomm	snapdragon_695_5g_mobile_platform_firmware	*
qualcomm	snapdragon_695_5g_mobile_platform	*
qualcomm	snapdragon_720g_mobile_platform_firmware	*
qualcomm	snapdragon_720g_mobile_platform	*
qualcomm	snapdragon_778g_5g_mobile_platform_firmware	*
qualcomm	snapdragon_778g_5g_mobile_platform	*
qualcomm	snapdragon_778g\+_5g_mobile_platform_\(sm7325-ae\)_firmware	*
qualcomm	snapdragon_778g\+_5g_mobile_platform_\(sm7325-ae\)	*
qualcomm	snapdragon_782g_mobile_platform_\(sm7325-af\)_firmware	*
qualcomm	snapdragon_782g_mobile_platform_\(sm7325-af\)	*
qualcomm	snapdragon_7c\+_gen_3_compute_firmware	*
qualcomm	snapdragon_7c\+_gen_3_compute	*
qualcomm	snapdragon_8_gen_2_mobile_platform_firmware	*
qualcomm	snapdragon_8_gen_2_mobile_platform	*
qualcomm	snapdragon_8_gen_3_mobile_platform_firmware	*
qualcomm	snapdragon_8_gen_3_mobile_platform	*
qualcomm	snapdragon_8\+_gen_2_mobile_platform_firmware	*
qualcomm	snapdragon_8\+_gen_2_mobile_platform	*
qualcomm	snapdragon_855_mobile_platform_firmware	*
qualcomm	snapdragon_855_mobile_platform	*
qualcomm	snapdragon_855\+\/860_mobile_platform_\(sm8150-ac\)_firmware	*
qualcomm	snapdragon_855\+\/860_mobile_platform_\(sm8150-ac\)	*
qualcomm	snapdragon_865_5g_mobile_platform_firmware	*
qualcomm	snapdragon_865_5g_mobile_platform	*
qualcomm	snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\)_firmware	*
qualcomm	snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\)	*
qualcomm	snapdragon_870_5g_mobile_platform_\(sm8250-ac\)_firmware	*
qualcomm	snapdragon_870_5g_mobile_platform_\(sm8250-ac\)	*
qualcomm	snapdragon_888_5g_mobile_platform_firmware	*
qualcomm	snapdragon_888_5g_mobile_platform	*
qualcomm	snapdragon_888\+_5g_mobile_platform_\(sm8350-ac\)_firmware	*
qualcomm	snapdragon_888\+_5g_mobile_platform_\(sm8350-ac\)	*
qualcomm	snapdragon_ar1_gen_1_firmware	*
qualcomm	snapdragon_ar1_gen_1	*
qualcomm	snapdragon_ar1_gen_1_platform_\luna1\_firmware	*
qualcomm	snapdragon_ar1_gen_1_platform_\luna1\	*
qualcomm	snapdragon_x55_5g_modem-rf_system_firmware	*
qualcomm	snapdragon_x55_5g_modem-rf_system	*
qualcomm	sxr2230p_firmware	*
qualcomm	sxr2230p	*
qualcomm	sxr2250p_firmware	*
qualcomm	sxr2250p	*
qualcomm	sxr2330p_firmware	*
qualcomm	sxr2330p	*
qualcomm	wcd9341_firmware	*
qualcomm	wcd9341	*
qualcomm	wcd9370_firmware	*
qualcomm	wcd9370	*
qualcomm	wcd9375_firmware	*
qualcomm	wcd9375	*
qualcomm	wcd9378_firmware	*
qualcomm	wcd9378	*
qualcomm	wcd9380_firmware	*
qualcomm	wcd9380	*
qualcomm	wcd9385_firmware	*
qualcomm	wcd9385	*
qualcomm	wcd9390_firmware	*
qualcomm	wcd9390	*
qualcomm	wcd9395_firmware	*
qualcomm	wcd9395	*
qualcomm	wcn3950_firmware	*
qualcomm	wcn3950	*
qualcomm	wcn3988_firmware	*
qualcomm	wcn3988	*
qualcomm	wcn6450_firmware	*
qualcomm	wcn6450	*
qualcomm	wcn6650_firmware	*
qualcomm	wcn6650	*
qualcomm	wcn6755_firmware	*
qualcomm	wcn6755	*
qualcomm	wcn7861_firmware	*
qualcomm	wcn7861	*
qualcomm	wcn7881_firmware	*
qualcomm	wcn7881	*
qualcomm	wsa8810_firmware	*
qualcomm	wsa8810	*
qualcomm	wsa8815_firmware	*
qualcomm	wsa8815	*
qualcomm	wsa8830_firmware	*
qualcomm	wsa8830	*
qualcomm	wsa8832_firmware	*
qualcomm	wsa8832	*
qualcomm	wsa8835_firmware	*
qualcomm	wsa8835	*
qualcomm	wsa8840_firmware	*
qualcomm	wsa8840	*
qualcomm	wsa8845_firmware	*
qualcomm	wsa8845	*
qualcomm	wsa8845h_firmware	*
qualcomm	wsa8845h	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

This vulnerability is a memory corruption issue caused by unauthorized command execution in the GPU micronode when a specific sequence of commands is executed.

Impact Analysis

The vulnerability can lead to severe impacts including high confidentiality, integrity, and availability losses due to memory corruption in the GPU micronode, potentially allowing unauthorized actions or system compromise.

Hi! I’m here to help you understand CVE-2025-21480. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...