CVE-2025-21479
HIGH KEVQualcomm AQT1000 and FastConnect Firmware - Memory Corruption via Unauthorized GPU Micronode Command Execution
Title source: llmExploitation Summary
CVE-2025-21479 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added June 3, 2025. EIP tracks 2 public exploits from researchers including zhuowei, sarabpal-dev.
AI-analyzed exploit summary This repository contains a root exploit for the Quest 3/3S devices leveraging CVE-2025-21479, a vulnerability in the Adreno GPU (A7xx series). The exploit manipulates the IB (Instruction Buffer) level to bypass security checks and achieve privilege escalation.
Description
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
Exploits (2)
This repository contains a root exploit for the Quest 3/3S devices leveraging CVE-2025-21479, a vulnerability in the Adreno GPU (A7xx series). The exploit manipulates the IB (Instruction Buffer) level to bypass security checks and achieve privilege escalation.
This repository contains a proof-of-concept exploit for CVE-2025-21479, targeting a vulnerability in Qualcomm Adreno GPU drivers. The exploit leverages GPU memory manipulation to achieve arbitrary read/write primitives in kernel memory, likely for local privilege escalation (LPE).
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H