CVE-2025-21479

HighActively exploited (CISA KEV)

Description

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

SeverityHigh
CVSS8.6
Exploit probability—
ProductQualcomm Multiple Chipsets
PublishedJun 3, 2025
First seenJun 3, 2025
Added to KEVJun 3, 2025

How to fix

CISA required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CISA due date: Jun 24, 2025

Affected products

ProductAffected versionsFixed in
qualcomm aqt1000_firmwareNo range specified—
qualcomm fastconnect_6200_firmwareNo range specified—
qualcomm fastconnect_6700_firmwareNo range specified—
qualcomm fastconnect_6900_firmwareNo range specified—
qualcomm fastconnect_7800_firmwareNo range specified—
qualcomm fastconnect_6800_firmwareNo range specified—
qualcomm qca6391_firmwareNo range specified—
qualcomm qcm4490_firmwareNo range specified—
qualcomm qcs4490_firmwareNo range specified—
qualcomm sd855_firmwareNo range specified—
qualcomm sm4635_firmwareNo range specified—
qualcomm sm6250_firmwareNo range specified—
qualcomm sm6650_firmwareNo range specified—
qualcomm sm6650p_firmwareNo range specified—
qualcomm sm7325p_firmwareNo range specified—
qualcomm sm7635_firmwareNo range specified—
qualcomm sm7675_firmwareNo range specified—
qualcomm sm7675p_firmwareNo range specified—
qualcomm sm8550p_firmwareNo range specified—
qualcomm sm8635_firmwareNo range specified—
qualcomm sm8635p_firmwareNo range specified—
qualcomm sm8650q_firmwareNo range specified—
qualcomm snapdragon_4_gen_1_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_460_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_480_5g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)_firmwareNo range specified—
qualcomm snapdragon_662_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_680_4g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_685_4g_mobile_platform_\(sm6225-ad\)_firmwareNo range specified—
qualcomm snapdragon_690_5g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_695_5g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_720g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_778g_5g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_778g\+_5g_mobile_platform_\(sm7325-ae\)_firmwareNo range specified—
qualcomm snapdragon_782g_mobile_platform_\(sm7325-af\)_firmwareNo range specified—
qualcomm snapdragon_7c\+_gen_3_compute_firmwareNo range specified—
qualcomm snapdragon_8_gen_2_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_8_gen_3_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_8\+_gen_2_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_855_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_855\+\/860_mobile_platform_\(sm8150-ac\)_firmwareNo range specified—
qualcomm snapdragon_865_5g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\)_firmwareNo range specified—
qualcomm snapdragon_870_5g_mobile_platform_\(sm8250-ac\)_firmwareNo range specified—
qualcomm snapdragon_888_5g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_888\+_5g_mobile_platform_\(sm8350-ac\)_firmwareNo range specified—
qualcomm snapdragon_ar1_gen_1_firmwareNo range specified—
qualcomm snapdragon_ar1_gen_1_platform_\"luna1\"_firmwareNo range specified—
qualcomm snapdragon_x55_5g_modem-rf_system_firmwareNo range specified—
qualcomm sxr2230p_firmwareNo range specified—
qualcomm sxr2250p_firmwareNo range specified—
qualcomm sxr2330p_firmwareNo range specified—
qualcomm wcd9395_firmwareNo range specified—
qualcomm wcn3950_firmwareNo range specified—
qualcomm wcn3988_firmwareNo range specified—
qualcomm wcn6450_firmwareNo range specified—
qualcomm wcn6650_firmwareNo range specified—
qualcomm wcn6755_firmwareNo range specified—
qualcomm wcn7861_firmwareNo range specified—
qualcomm wcn7881_firmwareNo range specified—
qualcomm wsa8810_firmwareNo range specified—
qualcomm wsa8815_firmwareNo range specified—
qualcomm wsa8830_firmwareNo range specified—
qualcomm wsa8835_firmwareNo range specified—
qualcomm wsa8840_firmwareNo range specified—
qualcomm wsa8845_firmwareNo range specified—
qualcomm wsa8845h_firmwareNo range specified—
qualcomm wcd9341_firmwareNo range specified—
qualcomm wcd9370_firmwareNo range specified—
qualcomm wcd9375_firmwareNo range specified—
qualcomm wcd9378_firmwareNo range specified—
qualcomm wcd9380_firmwareNo range specified—
qualcomm wcd9385_firmwareNo range specified—
qualcomm wcd9390_firmwareNo range specified—
qualcomm wsa8832_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.