Executive brief
A security vulnerability exists in several Qualcomm chipsets used in mobile devices and connectivity hardware. An attacker could exploit this flaw to corrupt system memory, potentially leading to unauthorized access or device instability. This vulnerability has been observed being used in real-world attacks, making immediate patching critical for maintaining device integrity and user data privacy.
Technical details
This vulnerability is classified as an Incorrect Authorization (CWE-863) issue within the GPU micronode of various Qualcomm chipsets. It occurs when a specific sequence of commands is executed, leading to unauthorized command execution and subsequent memory corruption. The attack vector is local, requiring user interaction (UI:R) to trigger the exploit, but it results in a scope change (S:C) with high impact on confidentiality, integrity, and availability. CISA has confirmed active exploitation of this vulnerability. Users should apply firmware updates provided by their device manufacturers.
Affected products
- Qualcomm AQT1000 Firmware
- Qualcomm FastConnect 6200 Firmware
- Qualcomm FastConnect 6700 Firmware
- Qualcomm FastConnect 6800 Firmware
- Qualcomm FastConnect 6900 Firmware
- Qualcomm FastConnect 7800 Firmware
- Qualcomm QCA6391 Firmware
- Qualcomm QCM4490 Firmware
- Qualcomm QCS4490 Firmware
- Qualcomm SC8380XP Firmware
- Qualcomm SD855 Firmware
- Qualcomm SM4635 Firmware
- Qualcomm SM6250 Firmware
- Qualcomm SM6650 Firmware
- Qualcomm SM7325P Firmware
- Qualcomm SM7635 Firmware
- Qualcomm SM7675 Firmware
- Qualcomm SM8550P Firmware
- Qualcomm SM8635 Firmware
- Qualcomm SM8650Q Firmware
- Qualcomm Snapdragon 460 Mobile Platform Firmware
Timeline
- 2025-06-03: disclosed
- 2025-06-03: advisory
- 2025-06-03: kev added: Added to CISA KEV catalog on publication date
- 2025-06-03: exploited: Reported as exploited in the wild at the time of disclosure