CVE-2025-21480

Incorrect Authorization in Graphics Windows

Basic Information

CVE State: PUBLISHED
Reserved Date: December 18, 2024
Published Date: June 03, 2025
Last Updated: February 26, 2026
Vendor: Qualcomm, Inc.
Product: Snapdragon
Description: Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
Tags

CVSS Scores

CVSS v3.1

8.6 - HIGH

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

EPSS Score

Score: 2.00% (Percentile: 83.95%) as of 2026-05-31

SSVC Information

Exploitation: active
Technical Impact: total

Exploit Status

Exploited in the Wild: Yes (2026-06-01 10:31:39 UTC) Source

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html

Known Exploited Vulnerability Information

Source	Added Date
CVE	2026-06-01 10:31:32 UTC

Timeline

CVE ID Reserved

December 18, 2024
CVE Published to Public

June 03, 2025
Added to KEVIntel

June 01, 2026