Google fixed two Qualcomm bugs that were actively exploited in the wild
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2025-21479+2 related CVEs | Incorrect Authorization in Qualcomm GPU Firmware Across Multiple Chipsets | 8.6 group max | <1% | KEVPoC ×2 | KEV |
| CVE-2025-48530 | In multiple locations, there is a possible condition that results in OOB accesses due to an incorrect bounds check | 8.1 | <1% |
From the original article
2 min read at securityaffairs.comGoogle addressed multiple Android flaws, including two Qualcomm vulnerabilities that were actively exploited in the wild. Google released security updates to address multiple Android vulnerabilities, including two Qualcomm flaws, tracked as CVE-2025-21479 (CVSS score: 8. 6) and CVE-2025-27038 (CVSS score: 7.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.