peter bassill · operator
$ cve CVE-2025-21480 JSON

CVE-2025-21480 KEV

8.6
HIGH · CVSS 3.1 · EPSS 0.5% (pctl 37)

Patch first

On CISA KEV — known exploited in the wild, due 2025-06-24.

Description

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

Scoring

CVSS8.6 (HIGH, v3.1)
VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
EPSS0.46% — more likely to be exploited than 37% of all CVEs
WeaknessCWE-863
On CISA KEVyes — remediate by 2025-06-24
Public exploitnone known
Published2025-06-03
Last modified2026-06-17

CISA KEV

NameQualcomm Multiple Chipsets Incorrect Authorization Vulnerability
Added2025-06-03
Due2025-06-24
Vendor / productQualcomm / Multiple Chipsets
Ransomware usenone reported

Affected (40)

VendorProduct
qualcommaqt1000
qualcommaqt1000 firmware
qualcommfastconnect 6200
qualcommfastconnect 6200 firmware
qualcommfastconnect 6700
qualcommfastconnect 6700 firmware
qualcommfastconnect 6800
qualcommfastconnect 6800 firmware
qualcommfastconnect 6900
qualcommfastconnect 6900 firmware
qualcommfastconnect 7800
qualcommfastconnect 7800 firmware
qualcommqca6391
qualcommqca6391 firmware
qualcommqcm4490
qualcommqcm4490 firmware
qualcommqcs4490
qualcommqcs4490 firmware
qualcommsc8380xp
qualcommsc8380xp firmware
qualcommsd855
qualcommsd855 firmware
qualcommsm4635
qualcommsm4635 firmware
qualcommsm6250
qualcommsm6250 firmware
qualcommsm6650
qualcommsm6650 firmware
qualcommsm6650p
qualcommsm6650p firmware
qualcommsm7325p
qualcommsm7325p firmware
qualcommsm7635
qualcommsm7635 firmware
qualcommsm7675
qualcommsm7675 firmware
qualcommsm7675p
qualcommsm7675p firmware
qualcommsm8550p
qualcommsm8550p firmware

References

→ the Explorer  ·  watch your stack  ·  NVD