CVE-2025-21479
Incorrect Authorization in Graphics
In short
A flaw in GPU graphics processing allows attackers to run unauthorized commands that corrupt system memory. This can lead to crashes, data theft, or system compromise.
Technical detail
CWE-863 authorization bypass in GPU micronode command execution permits memory corruption through a specific command sequence. Attack vector requires local access to GPU interface with insufficient privilege validation; impacts confidentiality, integrity, and availability of system memory.
Summary generated and translated by AI from the official description.
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected products
Qualcomm, Inc. · SnapdragonWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →