high8.6Known exploited
CVE-2025-21480
Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2025-06-03. Federal due date: 2025-06-24.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Impact
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qualcomm | Aqt1000 Firmware | All versions |
| Qualcomm | Fastconnect 6200 Firmware | All versions |
| Qualcomm | Fastconnect 6700 Firmware | All versions |
| Qualcomm | Fastconnect 6800 Firmware | All versions |
| Qualcomm | Fastconnect 6900 Firmware | All versions |
| Qualcomm | Fastconnect 7800 Firmware | All versions |
| Qualcomm | Qca6391 Firmware | All versions |
| Qualcomm | Qcm4490 Firmware | All versions |
| Qualcomm | Qcs4490 Firmware | All versions |
| Qualcomm | Sc8380xp Firmware | All versions |
| Qualcomm | Sd855 Firmware | All versions |
| Qualcomm | Sm4635 Firmware | All versions |