CVE-2025-27060

nvd nist

Published: Oct 9, 2025Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 2.0 / Impact: 6.0

Source: product-security@qualcomm.com (Secondary)

Description

Memory corruption while performing SCM call with malformed inputs.

Affected (25)

Products: Qualcomm: Immersive Home 214 Platform Firmware, Immersive Home 216 Platform Firmware, Immersive Home 316 Platform Firmware, Immersive Home 318 Platform Firmware, Ipq5010 Firmware, Ipq5028 Firmware, Qcn6023 Firmware, Qcn6024 Firmware, Qcn6100 Firmware, Qcn6102 Firmware, Qcn6112 Firmware, Qcn6122 Firmware, Qcn6132 Firmware, Qcn9000 Firmware, Qcn9001 Firmware, Qcn9002 Firmware, Qcn9003 Firmware, Qcn9012 Firmware, Qcn9022 Firmware, Qcn9024 Firmware, Qcn9070 Firmware, Qcn9072 Firmware, Qcn9074 Firmware, Qcn9100 Firmware, Qcn9274 Firmware

Qualcomm

25 products

Immersive Home 214 Platform Firmware

Immersive Home 216 Platform Firmware

Immersive Home 316 Platform Firmware

Immersive Home 318 Platform Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Immersive Home 214 Platform Firmware	All versions

Running on/with	Platform Versions
Qualcomm Immersive Home 214 Platform	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Immersive Home 216 Platform Firmware	All versions

Running on/with	Platform Versions
Qualcomm Immersive Home 216 Platform	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Immersive Home 316 Platform Firmware	All versions

Running on/with	Platform Versions
Qualcomm Immersive Home 316 Platform	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Immersive Home 318 Platform Firmware	All versions

Running on/with	Platform Versions
Qualcomm Immersive Home 318 Platform	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Ipq5010 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Ipq5010	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Ipq5028 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Ipq5028	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn6023 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn6023	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn6024 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn6024	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn6100 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn6100	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn6102 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn6102	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn6112 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn6112	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn6122 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn6122	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn6132 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn6132	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn9000 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn9000	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn9001 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn9001	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn9002 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn9002	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn9003 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn9003	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn9012 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn9012	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn9022 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn9022	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn9024 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn9024	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn9070 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn9070	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn9072 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn9072	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn9074 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn9074	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn9100 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn9100	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn9274 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn9274	All versions

Related CWEs

CWE-822

Untrusted Pointer Dereference

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

References (1)

https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html

Source: product-security@qualcomm.com

Vendor Advisory

Timeline

No history available yet.