CVE-2025-27039

nvd nist

Published: Oct 9, 2025Modified: Jun 17, 2026

6.6

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Exploitability: 1.8 / Impact: 4.7

Source: product-security@qualcomm.com (Secondary)

Description

Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request.

Affected (9)

Products: Qualcomm: Fastconnect 6900 Firmware, Fastconnect 7800 Firmware, Sxr2230p Firmware, Sxr2250p Firmware, Wcd9380 Firmware, Wcd9385 Firmware, Wsa8830 Firmware, Wsa8832 Firmware, Wsa8835 Firmware

Qualcomm

9 products

Fastconnect 6900 Firmware

Fastconnect 7800 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Fastconnect 6900 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Fastconnect 6900	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Fastconnect 7800 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Fastconnect 7800	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sxr2230p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sxr2230p	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sxr2250p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sxr2250p	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcd9380 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcd9380	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcd9385 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcd9385	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8830 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8830	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8832 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8832	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8835 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8835	All versions

Related CWEs

CWE-390

Detection of Error Condition Without Action

The product detects a specific error, but takes no actions to handle the error.

References (1)

https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html

Source: product-security@qualcomm.com

PatchVendor Advisory

Timeline

No history available yet.