Qualcomm fixed three zero-days exploited in limited, targeted attacks
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-43047 | Use-After-Free in Qualcomm FastConnect and QCA Chipset Firmware | 7.8 | <1% | KEV | KEV |
CVE-2025-21479+2 related CVEs | Incorrect Authorization in Qualcomm GPU Firmware Across Multiple Chipsets | 8.6 group max | <1% | KEVPoC ×2 | KEV |
From the original article
2 min read at securityaffairs.comQualcomm addressed three zero-day vulnerabilities that, according to the company, have been exploited in limited, targeted attacks in the wild. Google Android Security team reported the three issues, tracked as CVE-2025-21479, CVE-2025-21480, CVE-2025-27038, to the company.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.