8.6

CVE-2025-21479

Warnung
Medienbericht

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Aqt1000 Firmware Version-
   Qualcomm ≫ Aqt1000 Version-
Qualcomm ≫ Qca6391 Firmware Version-
   Qualcomm ≫ Qca6391 Version-
Qualcomm ≫ Qcm4490 Firmware Version-
   Qualcomm ≫ Qcm4490 Version-
Qualcomm ≫ Qcs4490 Firmware Version-
   Qualcomm ≫ Qcs4490 Version-
Qualcomm ≫ Sd855 Firmware Version-
   Qualcomm ≫ Sd855 Version-
Qualcomm ≫ Sm4635 Firmware Version-
   Qualcomm ≫ Sm4635 Version-
Qualcomm ≫ Sm6250 Firmware Version-
   Qualcomm ≫ Sm6250 Version-
Qualcomm ≫ Sm6650 Firmware Version-
   Qualcomm ≫ Sm6650 Version-
Qualcomm ≫ Sm6650p Firmware Version-
   Qualcomm ≫ Sm6650p Version-
Qualcomm ≫ Sm7325p Firmware Version-
   Qualcomm ≫ Sm7325p Version-
Qualcomm ≫ Sm7635 Firmware Version-
   Qualcomm ≫ Sm7635 Version-
Qualcomm ≫ Sm7675 Firmware Version-
   Qualcomm ≫ Sm7675 Version-
Qualcomm ≫ Sm7675p Firmware Version-
   Qualcomm ≫ Sm7675p Version-
Qualcomm ≫ Sm8550p Firmware Version-
   Qualcomm ≫ Sm8550p Version-
Qualcomm ≫ Sm8635 Firmware Version-
   Qualcomm ≫ Sm8635 Version-
Qualcomm ≫ Sm8635p Firmware Version-
   Qualcomm ≫ Sm8635p Version-
Qualcomm ≫ Sm8650q Firmware Version-
   Qualcomm ≫ Sm8650q Version-
Qualcomm ≫ Sxr2230p Firmware Version-
   Qualcomm ≫ Sxr2230p Version-
Qualcomm ≫ Sxr2250p Firmware Version-
   Qualcomm ≫ Sxr2250p Version-
Qualcomm ≫ Sxr2330p Firmware Version-
   Qualcomm ≫ Sxr2330p Version-
Qualcomm ≫ Wcd9395 Firmware Version-
   Qualcomm ≫ Wcd9395 Version-
Qualcomm ≫ Wcn3950 Firmware Version-
   Qualcomm ≫ Wcn3950 Version-
Qualcomm ≫ Wcn3988 Firmware Version-
   Qualcomm ≫ Wcn3988 Version-
Qualcomm ≫ Wcn6450 Firmware Version-
   Qualcomm ≫ Wcn6450 Version-
Qualcomm ≫ Wcn6650 Firmware Version-
   Qualcomm ≫ Wcn6650 Version-
Qualcomm ≫ Wcn6755 Firmware Version-
   Qualcomm ≫ Wcn6755 Version-
Qualcomm ≫ Wcn7861 Firmware Version-
   Qualcomm ≫ Wcn7861 Version-
Qualcomm ≫ Wcn7881 Firmware Version-
   Qualcomm ≫ Wcn7881 Version-
Qualcomm ≫ Wsa8810 Firmware Version-
   Qualcomm ≫ Wsa8810 Version-
Qualcomm ≫ Wsa8815 Firmware Version-
   Qualcomm ≫ Wsa8815 Version-
Qualcomm ≫ Wsa8830 Firmware Version-
   Qualcomm ≫ Wsa8830 Version-
Qualcomm ≫ Wsa8835 Firmware Version-
   Qualcomm ≫ Wsa8835 Version-
Qualcomm ≫ Wsa8840 Firmware Version-
   Qualcomm ≫ Wsa8840 Version-
Qualcomm ≫ Wsa8845 Firmware Version-
   Qualcomm ≫ Wsa8845 Version-
Qualcomm ≫ Wsa8845h Firmware Version-
   Qualcomm ≫ Wsa8845h Version-
Qualcomm ≫ Wcd9341 Firmware Version-
   Qualcomm ≫ Wcd9341 Version-
Qualcomm ≫ Wcd9370 Firmware Version-
   Qualcomm ≫ Wcd9370 Version-
Qualcomm ≫ Wcd9375 Firmware Version-
   Qualcomm ≫ Wcd9375 Version-
Qualcomm ≫ Wcd9378 Firmware Version-
   Qualcomm ≫ Wcd9378 Version-
Qualcomm ≫ Wcd9380 Firmware Version-
   Qualcomm ≫ Wcd9380 Version-
Qualcomm ≫ Wcd9385 Firmware Version-
   Qualcomm ≫ Wcd9385 Version-
Qualcomm ≫ Wcd9390 Firmware Version-
   Qualcomm ≫ Wcd9390 Version-
Qualcomm ≫ Wsa8832 Firmware Version-
   Qualcomm ≫ Wsa8832 Version-

03.06.2025: CISA Known Exploited Vulnerabilities (KEV) Catalog

Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

Schwachstelle

Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

Beschreibung

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.43
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
product-security@qualcomm.com 8.6 1.8 6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.