Description
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Qualcomm | Snapdragon | AQT1000, FastConnect 6200, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, QCA6391, QCM4490, QCS4490, SD855, SM4635, SM6250, SM6650, SM6650P, SM7325P, SM7635, SM7675, SM7675P, SM8550P, SM8635, SM8635P, SM8650Q, Snapdragon 4 Gen 1 Mobile Platform, Snapdragon 460 Mobile Platfo… | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 15 repositories · most starred shown
-
zhuowei/cheese ★ 278 · Jun 19, 2025
CVE-2025-21479 proof-of-concept, I think
-
sarabpal-dev/cheese-cake ★ 34 · Nov 16, 2025
A proof-of-concept for CVE-2025-21479, chained with a Dirty Pagetable technique.
-
ma4the/omae-wa-cheese-da ★ 18 · Jun 18, 2026
CVE-2025-21479 PoC for ZFlip5 with Knox in the way!(˶˃ ᵕ ˂˶)
-
linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479 ★ 12 · Aug 19, 2026
-
CamsShaft/SELinux-Permissive-Only-CVE-2025-21479 ★ 11 · Jul 28, 2026
This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the adreno kgsl on many devices including Samsung snapdragon devices
-
linux-tools/VIVO-IQOO-Neo9-Root-Tools ★ 8 · Oct 6, 2026
Support OriginOS 4~ OriginOS 6(Some firmware requires manual, individual adaptation), using CVE-2025-21479，CVE-2026-43499
-
Qingizi7/cve-2025-21479_iqooneo8 ★ 7 · Aug 20, 2026
Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables SELinux, spawns root shell
-
RamenFast/zenfone9-root ★ 5 · Sep 17, 2026
Temporary root (uid 0) on a bootloader-locked ASUS Zenfone 9 via CVE-2025-21479 + a perf-based physical-address leak. GPLv3.
-
reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479 ★ 4 · Aug 18, 2026
iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** — 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案
-
diyiqiuye/CVE-2025-21479-FX5P ★ 3 · Sep 24, 2026
Temporary root for OPPO Find X5 Pro (PFEM00) via CVE-2025-21479 + KernelSU LKM late-load (cloud-buildable)
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 1
- WID-SEC-2025-1709 Android Patchday August 2025: Multiple Vulnerabilities BSI CERT-Bund (WID) · Aug 4, 2025