CVE-2025-21480

Incorrect Authorization in Graphics Windows

State: Published
Severity: 8.6 High
Published: Jun 3, 2025
Updated: Feb 26, 2026
Reserved: Dec 18, 2024

Description

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

Scores

CVSS	Score	Vector	Source
3.1	8.6 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H	qualcomm

Weaknesses

CWE-863 Incorrect Authorization

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	AQT1000Affected FastConnect 6200Affected FastConnect 6700Affected FastConnect 6800Affected FastConnect 6900Affected FastConnect 7800Affected QCA6391Affected QCM4490Affected QCS4490Affected SC8380XPAffected SD855Affected SM4635Affected SM6250Affected SM6650Affected SM6650PAffected SM7325PAffected SM7635Affected SM7675Affected SM7675PAffected SM8550PAffected SM8635Affected SM8635PAffected SM8650QAffected Snapdragon 4 Gen 1 Mobile PlatformAffected Snapdragon 460 Mobile PlatformAffected and 51 more versions

Product

Versions

SnapdragonQualcomm, Inc.

AQT1000Affected
FastConnect 6200Affected
FastConnect 6700Affected
FastConnect 6800Affected
FastConnect 6900Affected
FastConnect 7800Affected
QCA6391Affected
QCM4490Affected
QCS4490Affected
SC8380XPAffected
SD855Affected
SM4635Affected
SM6250Affected
SM6650Affected
SM6650PAffected
SM7325PAffected
SM7635Affected
SM7675Affected
SM7675PAffected
SM8550PAffected
SM8635Affected
SM8635PAffected
SM8650QAffected
Snapdragon 4 Gen 1 Mobile PlatformAffected
Snapdragon 460 Mobile PlatformAffected
and 51 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.