CVE-2025-21479
HIGH KEVQualcomm AQT1000 and FastConnect Firmware - Memory Corruption via Unauthorized GPU Micronode Command Execution
Title source: llmExploitation Summary
CVE-2025-21479 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added June 3, 2025. EIP tracks 5 public exploits from researchers including zhuowei, sarabpal-dev, CamsShaft.
AI-analyzed exploit summary This repository contains a root exploit for the Quest 3/3S devices leveraging CVE-2025-21479, a vulnerability in the Adreno GPU (A7xx series). The exploit manipulates the IB (Instruction Buffer) level to bypass security checks and achieve privilege escalation.
Description
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
Exploits (5)
This repository contains a root exploit for the Quest 3/3S devices leveraging CVE-2025-21479, a vulnerability in the Adreno GPU (A7xx series). The exploit manipulates the IB (Instruction Buffer) level to bypass security checks and achieve privilege escalation.
This repository contains a proof-of-concept exploit for CVE-2025-21479, targeting a vulnerability in Qualcomm Adreno GPU drivers. The exploit leverages GPU memory manipulation to achieve arbitrary read/write primitives in kernel memory, likely for local privilege escalation (LPE).
This repository contains a functional local privilege escalation (LPE) exploit for CVE-2025-21479, targeting Samsung S22/S22U devices running kernel 5.10 and Android 14. The exploit leverages a GPU memory corruption vulnerability to achieve SELinux permissive mode from an untrusted Termux environment without requiring ADB.
This repository contains a functional local privilege escalation (LPE) exploit for CVE-2025-21479, targeting Samsung S22/S22U devices running kernel 5.10 and Android 14. The exploit leverages a GPU memory corruption vulnerability to achieve SELinux permissive mode from an untrusted Termux environment without requiring ADB.
This repository contains a functional exploit for CVE-2025-21479, targeting the Galaxy Z Flip 5's GPU to achieve arbitrary physical read/write, KASLR leak, SELinux permissive mode, and a resident root server. The exploit leverages GPU command manipulation and page table setup to escalate privileges.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H