ACTIEF MISBRUIKT
CVE-2025-21480: Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
| Leverancier | Qualcomm |
|---|---|
| Product | Multiple Chipsets |
| Actief misbruikt | Ja |
| Toegevoegd aan CISA KEV | 3 jun 2025 |
| CISA-deadline (Amerikaanse overheid) | 24 jun 2025 |
| Zwakte (CWE) | CWE-863 |
Vereiste actie (tekst van CISA, Engels)
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Beschrijving (NVD, Engels)
Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
BRONNEN
Andere lekken bij Qualcomm
- CVE-2026-21385: Qualcomm Multiple Chipsets Memory Corruption Vulnerability
- CVE-2025-27038: Qualcomm Multiple Chipsets Use-After-Free Vulnerability
- CVE-2025-21479: Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
- CVE-2024-43047: Qualcomm Multiple Chipsets Use-After-Free Vulnerability
- CVE-2023-33107: Qualcomm Multiple Chipsets Integer Overflow Vulnerability
Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.