CVE-2025-21480: Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

High severity, CVSS 8.6. Actively exploited: in CISA KEV since 2025-06-03. EPSS: 0.5% chance of exploitation in the next 30 days.

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

Affected products

• Qualcomm AQT1000 Firmware: affected versions not specified
• Qualcomm Fastconnect 6200 Firmware: affected versions not specified
• Qualcomm Fastconnect 6700 Firmware: affected versions not specified
• Qualcomm Fastconnect 6800 Firmware: affected versions not specified
• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm QCA6391 Firmware: affected versions not specified
• Qualcomm QCM4490 Firmware: affected versions not specified
• Qualcomm QCS4490 Firmware: affected versions not specified
• Qualcomm SC8380XP Firmware: affected versions not specified
• Qualcomm SD855 Firmware: affected versions not specified
• Qualcomm SM4635 Firmware: affected versions not specified
• Qualcomm SM6250 Firmware: affected versions not specified
• Qualcomm SM6650 Firmware: affected versions not specified
• Qualcomm SM6650P Firmware: affected versions not specified
• Qualcomm SM7325P Firmware: affected versions not specified
• Qualcomm SM7635 Firmware: affected versions not specified
• Qualcomm SM7675 Firmware: affected versions not specified
• Qualcomm SM7675P Firmware: affected versions not specified
• Qualcomm SM8550P Firmware: affected versions not specified
• Qualcomm SM8635 Firmware: affected versions not specified
• Qualcomm SM8635P Firmware: affected versions not specified
• Qualcomm SM8650Q Firmware: affected versions not specified
• Qualcomm Snapdragon 460 Mobile Platform Firmware: affected versions not specified
• Qualcomm Snapdragon 480+ 5g Mobile Platform (sm4350-Ac) Firmware: affected versions not specified
• and 51 more

Published 2025-06-03. Last modified 2026-06-17.