CVE-2025-21479

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

CVSS v3.1

8.6 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

EPSS

0.81% chance of exploitation in the next 30 days, 54th percentile

CISA KEV

added 2025-06-03

Published

2025-06-03

Updated

2026-02-26

Proof-of-concept exploits (10)

• FreeXR/eureka_panther-adreno-gpu-exploit-1239★ · 2026-01-25
• zhuowei/cheese272★ · 2025-08-16
• Type010/cve-2025-21479-iqoo11pro10★ · 2026-08-31
• linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479
• CamsShaft/SELinux-Permissive-Only-CVE-2025-21479
• Qingizi7/cve-2025-21479_iqooneo8
• ma4the/omae-wa-cheese-da
• reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479
• sarabpal-dev/cheese-cake
• unitdevgcc/Adreno_PoC

References

• CVE Record
• NVD entry

Related

• CVE-2018-20346
• CVE-2022-26763
• CVE-2022-26766
• CVE-2025-27363
• CVE-2025-31200
• CVE-2025-48593