CVE-2025-27064CWE-126

CVE-2025-27064

Medium · published November 4, 2025

CVSS v3.1
6.1
EPSS
0%
Percentile
0.2
In the wild
Unconfirmed
What it is

Information disclosure while registering commands from clients with diag through diagHal.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00084 · 0.2th percentile
Weakness
CWE-126 · Buffer Over-read
Published
2025-11-04T09:15Z
Affected products (77)
ProductVersionsFixed in
qualcomm/fastconnect_6900_firmwareall versions—
qualcomm/fastconnect_7800_firmwareall versions—
qualcomm/immersive_home_3210_platform_firmwareall versions—
qualcomm/immersive_home_326_platform_firmwareall versions—
qualcomm/ipq5300_firmwareall versions—
qualcomm/ipq5302_firmwareall versions—
qualcomm/ipq5312_firmwareall versions—
qualcomm/ipq5332_firmwareall versions—
qualcomm/ipq5424_firmwareall versions—
qualcomm/ipq9008_firmwareall versions—
qualcomm/ipq9048_firmwareall versions—
qualcomm/ipq9554_firmwareall versions—
qualcomm/ipq9570_firmwareall versions—
qualcomm/ipq9574_firmwareall versions—
qualcomm/mdm9628_firmwareall versions—
qualcomm/qam8255p_firmwareall versions—
qualcomm/qam8650p_firmwareall versions—
qualcomm/qca0000_firmwareall versions—
qualcomm/qca6564a_firmwareall versions—
qualcomm/qca6564au_firmwareall versions—
qualcomm/qca6574a_firmwareall versions—
qualcomm/qca6574au_firmwareall versions—
qualcomm/qca6584au_firmwareall versions—
qualcomm/qca6595au_firmwareall versions—
qualcomm/qca6678aq_firmwareall versions—
qualcomm/qca6688aq_firmwareall versions—
qualcomm/qca6698aq_firmwareall versions—
qualcomm/qca8075_firmwareall versions—
qualcomm/qca8080_firmwareall versions—
qualcomm/qca8081_firmwareall versions—
qualcomm/qca8082_firmwareall versions—
qualcomm/qca8084_firmwareall versions—
qualcomm/qca8085_firmwareall versions—
qualcomm/qca8101_firmwareall versions—
qualcomm/qca8102_firmwareall versions—
qualcomm/qca8111_firmwareall versions—
qualcomm/qca8112_firmwareall versions—
qualcomm/qca8384_firmwareall versions—
qualcomm/qca8385_firmwareall versions—
qualcomm/qca8386_firmwareall versions—
qualcomm/qca9367_firmwareall versions—
qualcomm/qca9377_firmwareall versions—
qualcomm/qcf8000_firmwareall versions—
qualcomm/qcf8001_firmwareall versions—
qualcomm/qcn5124_firmwareall versions—
qualcomm/qcn5224_firmwareall versions—
qualcomm/qcn6402_firmwareall versions—
qualcomm/qcn6412_firmwareall versions—
qualcomm/qcn6422_firmwareall versions—
qualcomm/qcn6432_firmwareall versions—
qualcomm/qcn9000_firmwareall versions—
qualcomm/qcn9012_firmwareall versions—
qualcomm/qcn9024_firmwareall versions—
qualcomm/qcn9074_firmwareall versions—
qualcomm/qcn9160_firmwareall versions—
qualcomm/qcn9274_firmwareall versions—
qualcomm/qxm8083_firmwareall versions—
qualcomm/sa4150p_firmwareall versions—
qualcomm/sa4155p_firmwareall versions—
qualcomm/sa6155p_firmwareall versions—
qualcomm/sa7255p_firmwareall versions—
qualcomm/sa8155p_firmwareall versions—
qualcomm/sa8195p_firmwareall versions—
qualcomm/sa8255p_firmwareall versions—
qualcomm/sa8530p_firmwareall versions—
qualcomm/sa8540p_firmwareall versions—
qualcomm/sa8650p_firmwareall versions—
qualcomm/sa9000p_firmwareall versions—
qualcomm/snapdragon_8_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_auto_5g_modem-rf_gen_2_firmwareall versions—
qualcomm/sxr2250p_firmwareall versions—
qualcomm/wcd9380_firmwareall versions—
qualcomm/wcn3660b_firmwareall versions—
qualcomm/wcn3680b_firmwareall versions—
qualcomm/wcn3980_firmwareall versions—
qualcomm/wsa8830_firmwareall versions—
qualcomm/wsa8835_firmwareall versions—
References (1)
EPSS history
Timeline
  • 04 NOV 03:19Z
    Buffer Over-read in Core Services
    cvelistv5