CVE-2025-27059CWE-823

CVE-2025-27059

High · published October 9, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
0.4
In the wild
Unconfirmed
What it is

Memory corruption while performing SCM call.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00088 · 0.4th percentile
Weakness
CWE-823 · Use of Out-of-range Pointer Offset
Published
2025-10-09T08:16Z
Affected products (25)
ProductVersionsFixed in
qualcomm/immersive_home_214_platform_firmwareall versions—
qualcomm/immersive_home_216_platform_firmwareall versions—
qualcomm/immersive_home_316_platform_firmwareall versions—
qualcomm/immersive_home_318_platform_firmwareall versions—
qualcomm/ipq5010_firmwareall versions—
qualcomm/ipq5028_firmwareall versions—
qualcomm/qcn6023_firmwareall versions—
qualcomm/qcn6024_firmwareall versions—
qualcomm/qcn6100_firmwareall versions—
qualcomm/qcn6102_firmwareall versions—
qualcomm/qcn6112_firmwareall versions—
qualcomm/qcn6122_firmwareall versions—
qualcomm/qcn6132_firmwareall versions—
qualcomm/qcn9000_firmwareall versions—
qualcomm/qcn9001_firmwareall versions—
qualcomm/qcn9002_firmwareall versions—
qualcomm/qcn9003_firmwareall versions—
qualcomm/qcn9012_firmwareall versions—
qualcomm/qcn9022_firmwareall versions—
qualcomm/qcn9024_firmwareall versions—
qualcomm/qcn9070_firmwareall versions—
qualcomm/qcn9072_firmwareall versions—
qualcomm/qcn9074_firmwareall versions—
qualcomm/qcn9100_firmwareall versions—
qualcomm/qcn9274_firmwareall versions—
References (1)
https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html · [email protected]
EPSS history
Timeline
  • 09 OCT 03:18Z
    Use of Out-of-range Pointer Offset in TZ Firmware
    cvelistv5