CVE-2025-21479

HIGH KEV

Qualcomm Aqt1000 Firmware - Incorrect Authorization

Title source: rule

Description

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

Exploits (2)

nomisec WORKING POC 200 stars
by zhuowei · local
https://github.com/zhuowei/cheese
nomisec WORKING POC 17 stars
by sarabpal-dev · local
https://github.com/sarabpal-dev/cheese-cake

Scores

CVSS v3 8.6
EPSS 0.0015
EPSS Percentile 35.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Details

CISA KEV 2025-06-03
VulnCheck KEV 2025-06-02
ENISA EUVD EUVD-2025-16710
CWE
CWE-863
Status published
Products (50)
qualcomm/aqt1000_firmware
qualcomm/fastconnect_6200_firmware
qualcomm/fastconnect_6700_firmware
qualcomm/fastconnect_6800_firmware
qualcomm/fastconnect_6900_firmware
qualcomm/fastconnect_7800_firmware
qualcomm/qca6391_firmware
qualcomm/qcm4490_firmware
qualcomm/qcs4490_firmware
qualcomm/sd855_firmware
... and 40 more
Published Jun 03, 2025
KEV Added Jun 03, 2025
Tracked Since Feb 18, 2026