CVE Catalog

Actively exploited in the wild

Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

Qualcomm - Multiple Chipsets · Listed in the CISA KEV since 2025-06-03. This indicates confirmed attacks in production environments.

Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CVE-2025-21480

HighCVSS 8.6KEV
Published: Updated: Translated: NVD NIST

Summary

The vulnerability causes memory corruption due to unauthorized command execution in the GPU micronode while executing a specific sequence of commands.

Risk Assessment

It could lead to privilege escalation or code execution in the GPU driver context, potentially compromising system integrity.

Recommendation

Install GPU driver updates provided by the vendor that address this vulnerability.

Other vulnerabilities in GPU micronode

Original NVD description (English source)

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS