CVE-2025-27074CWE-131

CVE-2025-27074

High ยท published November 4, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
0.4
In the wild
Unconfirmed
What it is

โšก A rogue GP command response can trigger memory corruption in your application! This vulnerability is like a mischievous chef who accidentally mixes too many ingredients, causing chaos in the kitchen! Think of it like a busy restaurant where the head chef misreads an order, throwing a wrench in the entire meal prep. This mishap can lead to unexpected behavior, much like how memory corruption can cause unpredictable crashes or data leaks in your software. If exploited, an attacker could manipulate the application's memory, leading to crashes or even unauthorized access to sensitive data. It's a high-stakes scenario where the integrity of your system could be at risk, jeopardizing user trust and data security.

Put simply

Think of it like a busy restaurant where the head chef misreads an order, throwing a wrench in the entire meal prep. This mishap can lead to unexpected behavior, much like how memory corruption can cause unpredictable crashes or data leaks in your software. This vulnerability arises from improper handling of GP command responses, allowing for potential memory corruption that can disrupt service and lead to critical failures in the application.

What to do

If exploited, an attacker could manipulate the application's memory, leading to crashes or even unauthorized access to sensitive data. It's a high-stakes scenario where the integrity of your system could be at risk, jeopardizing user trust and data security. Update your software to the latest version that patches this vulnerability as soon as possible. Monitor your application for any unusual behavior and conduct thorough testing to ensure stability after applying the patch. You've got this! By following these steps, youโ€™ll be well on your way to securing your application and keeping the kitchen running smoothly! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS v3.1
8.8 ยท HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00088 ยท 0.4th percentile
Weakness
CWE-131 ยท Incorrect Calculation of Buffer Size
Published
2025-11-04T09:15Z
Affected products (95)
ProductVersionsFixed in
qualcomm/apq8064au_firmwareall versionsโ€”
qualcomm/csr8811_firmwareall versionsโ€”
qualcomm/immersive_home_214_platform_firmwareall versionsโ€”
qualcomm/immersive_home_216_platform_firmwareall versionsโ€”
qualcomm/immersive_home_316_platform_firmwareall versionsโ€”
qualcomm/immersive_home_318_platform_firmwareall versionsโ€”
qualcomm/ipq5010_firmwareall versionsโ€”
qualcomm/ipq5028_firmwareall versionsโ€”
qualcomm/ipq8070_firmwareall versionsโ€”
qualcomm/ipq8070a_firmwareall versionsโ€”
qualcomm/ipq8071_firmwareall versionsโ€”
qualcomm/ipq8071a_firmwareall versionsโ€”
qualcomm/ipq8072_firmwareall versionsโ€”
qualcomm/ipq8072a_firmwareall versionsโ€”
qualcomm/ipq8074_firmwareall versionsโ€”
qualcomm/ipq8074a_firmwareall versionsโ€”
qualcomm/ipq8076_firmwareall versionsโ€”
qualcomm/ipq8076a_firmwareall versionsโ€”
qualcomm/ipq8078_firmwareall versionsโ€”
qualcomm/ipq8078a_firmwareall versionsโ€”
qualcomm/ipq8173_firmwareall versionsโ€”
qualcomm/ipq8174_firmwareall versionsโ€”
qualcomm/ipq9008_firmwareall versionsโ€”
qualcomm/ipq9574_firmwareall versionsโ€”
qualcomm/mdm9640_firmwareall versionsโ€”
qualcomm/mdm9650_firmwareall versionsโ€”
qualcomm/msm8996au_firmwareall versionsโ€”
qualcomm/pmp8074_firmwareall versionsโ€”
qualcomm/qca4024_firmwareall versionsโ€”
qualcomm/qca6174a_firmwareall versionsโ€”
qualcomm/qca6234_firmwareall versionsโ€”
qualcomm/qca6310_firmwareall versionsโ€”
qualcomm/qca6320_firmwareall versionsโ€”
qualcomm/qca6428_firmwareall versionsโ€”
qualcomm/qca6438_firmwareall versionsโ€”
qualcomm/qca6564a_firmwareall versionsโ€”
qualcomm/qca6564au_firmwareall versionsโ€”
qualcomm/qca6574_firmwareall versionsโ€”
qualcomm/qca6574a_firmwareall versionsโ€”
qualcomm/qca6574au_firmwareall versionsโ€”
qualcomm/qca6584au_firmwareall versionsโ€”
qualcomm/qca6694_firmwareall versionsโ€”
qualcomm/qca8072_firmwareall versionsโ€”
qualcomm/qca8075_firmwareall versionsโ€”
qualcomm/qca8081_firmwareall versionsโ€”
qualcomm/qca9888_firmwareall versionsโ€”
qualcomm/qca9889_firmwareall versionsโ€”
qualcomm/qca9984_firmwareall versionsโ€”
qualcomm/qcn5022_firmwareall versionsโ€”
qualcomm/qcn5024_firmwareall versionsโ€”
qualcomm/qcn5052_firmwareall versionsโ€”
qualcomm/qcn5054_firmwareall versionsโ€”
qualcomm/qcn5064_firmwareall versionsโ€”
qualcomm/qcn5122_firmwareall versionsโ€”
qualcomm/qcn5124_firmwareall versionsโ€”
qualcomm/qcn5152_firmwareall versionsโ€”
qualcomm/qcn5154_firmwareall versionsโ€”
qualcomm/qcn5164_firmwareall versionsโ€”
qualcomm/qcn5550_firmwareall versionsโ€”
qualcomm/qcn6023_firmwareall versionsโ€”
qualcomm/qcn6024_firmwareall versionsโ€”
qualcomm/qcn6100_firmwareall versionsโ€”
qualcomm/qcn6102_firmwareall versionsโ€”
qualcomm/qcn6112_firmwareall versionsโ€”
qualcomm/qcn6122_firmwareall versionsโ€”
qualcomm/qcn6132_firmwareall versionsโ€”
qualcomm/qcn9000_firmwareall versionsโ€”
qualcomm/qcn9001_firmwareall versionsโ€”
qualcomm/qcn9002_firmwareall versionsโ€”
qualcomm/qcn9003_firmwareall versionsโ€”
qualcomm/qcn9012_firmwareall versionsโ€”
qualcomm/qcn9022_firmwareall versionsโ€”
qualcomm/qcn9024_firmwareall versionsโ€”
qualcomm/qcn9070_firmwareall versionsโ€”
qualcomm/qcn9072_firmwareall versionsโ€”
qualcomm/qcn9074_firmwareall versionsโ€”
qualcomm/qcn9100_firmwareall versionsโ€”
qualcomm/qcn9274_firmwareall versionsโ€”
qualcomm/sd820_firmwareall versionsโ€”
qualcomm/sd821_firmwareall versionsโ€”
qualcomm/sdm429w_firmwareall versionsโ€”
qualcomm/sdx55_firmwareall versionsโ€”
qualcomm/snapdragon_429_mobile_platform_firmwareall versionsโ€”
qualcomm/snapdragon_820_automotive_platform_firmwareall versionsโ€”
qualcomm/snapdragon_820_mobile_platform_firmwareall versionsโ€”
qualcomm/snapdragon_821_mobile_platform_firmwareall versionsโ€”
qualcomm/snapdragon_wear_4100\+_platform_firmwareall versionsโ€”
qualcomm/wcd9335_firmwareall versionsโ€”
qualcomm/wcn3610_firmwareall versionsโ€”
qualcomm/wcn3620_firmwareall versionsโ€”
qualcomm/wcn3660b_firmwareall versionsโ€”
qualcomm/wcn3680b_firmwareall versionsโ€”
qualcomm/wcn3980_firmwareall versionsโ€”
qualcomm/wsa8810_firmwareall versionsโ€”
qualcomm/wsa8815_firmwareall versionsโ€”
References (1)
EPSS history
Timeline
  • 04 NOV 03:19Z
    Incorrect Calculation of Buffer Size in SCE-Mink
    cvelistv5