Exploitation active confirmée

Ajoutée au catalogue CISA KEV le 03/06/2025, correctif exigé avant le 24/06/2025 pour les agences fédérales américaines.

Action requise : Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Description officielle (NVD)

Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

Preuves de concept publiques (15)

Dépôts tiers non vérifiés, parfois piégés. Ne les exécutez jamais en production : uniquement dans un environnement de test isolé.

zhuowei/cheese · ★ 278 · 19/06/2025
CVE-2025-21479 proof-of-concept, I think
sarabpal-dev/cheese-cake · ★ 35 · 16/11/2025
A proof-of-concept for CVE-2025-21479, chained with a Dirty Pagetable technique.
ma4the/omae-wa-cheese-da · ★ 18 · 18/06/2026
CVE-2025-21479 PoC for ZFlip5 with Knox in the way!(˶˃ ᵕ ˂˶)
linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479 · ★ 10 · 19/08/2026
CamsShaft/SELinux-Permissive-Only-CVE-2025-21479 · ★ 9 · 28/07/2026
This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the adreno kgsl on many devices including Samsung snapdragon devices
Qingizi7/cve-2025-21479_iqooneo8 · ★ 6 · 20/08/2026
Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables SELinux, spawns root shell
linux-tools/VIVO-IQOO-Neo9-Root-Tools · ★ 6 · 06/10/2026
Support OriginOS 4~ OriginOS 6(Some firmware requires manual, individual adaptation), using CVE-2025-21479，CVE-2026-43499
RamenFast/zenfone9-root · ★ 4 · 17/09/2026
Temporary root (uid 0) on a bootloader-locked ASUS Zenfone 9 via CVE-2025-21479 + a perf-based physical-address leak. GPLv3.
reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479 · ★ 3 · 18/08/2026
iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** — 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案
diyiqiuye/CVE-2025-21479-FX5P · ★ 2 · 24/09/2026
Temporary root for OPPO Find X5 Pro (PFEM00) via CVE-2025-21479 + KernelSU LKM late-load (cloud-buildable)