CVE-2025-21479 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

Active exploitation observed

· CISA KEV catalogue

Required action Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Ransomware campaigns Not observed so far

Weakness CWE-863

Description

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

Affected products and versions

Product	Affected versions	Fixed in
Snapdragon	Versions not published

Other CVEs of Snapdragon

The 997 CVEs of Snapdragon →

CVE-2026-57559 Memory corruption while processing service requests 7.8 High CVE-2026-57555 Memory Corruption when executing system service routines due to improper handling of user input buffers 7.8 High CVE-2026-57554 Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC… 7.8 High CVE-2026-57546 Transient DOS when processing a continuous receive command with a zero-sized global configuration override 7.5 High