CVE-2025-21479

HighCVSS 8.6/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-863

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	AQT1000; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; QCA6391; QCM4490; QCS4490; SD855; SM4635; SM6250; SM6650; SM6650P; SM7325P; SM7635; SM7675; SM7675P; SM8550P; SM8635

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.htmlVendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-21479US Government Resource

Timeline

Published: Jun 3, 2025
Last modified: Jun 17, 2026
Added to CISA KEV: Jun 3, 2025
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-21487.5A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch.ops CVE-2025-214808.6Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.CVE-2025-214817.8Memory corruption while performing private key encryption in trusted application.CVE-2025-214827.1Cryptographic issue while performing RSA PKCS padding decoding.CVE-2025-214839.8Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.CVE-2025-214848.2Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.CVE-2025-214857.8Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.CVE-2025-214867.8Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.CVE-2025-214878.2Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the availabl CVE-2025-214888.2Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.CVE-2025-214896.1Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Region Mapping). Supported versions CVE-2025-21492.5A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function nnq_Sigmoid of th