CVEPublished 2025-06-031 article on news7 live referencesNVD data

CVE-2025-21479

Vulnerability data via CVEDB (Shodan)

CISA KEVKnown exploited in the wild.
CISA action: Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
CVSS v3.1
8.6
HIGH
EPSS percentile
47
Exploit Prediction Scoring System · top 53% of all CVEs
Description

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

Timeline
Published 2025-06-03

External references

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

More intel sources (5)

Known PoCs on GitHub (8)