CVE-2025-27031
7.8 highEPSS 0.1%
High (7.8) in qualcomm. EPSS 0.1% chance of exploitation in the next 30 days.
memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed.
Severity
CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-31)
- CWE
- CWE-416
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:fastconnect_6700_firmware
- qualcomm:fastconnect_6900_firmware
- qualcomm:fastconnect_7800_firmware
- qualcomm:qcm5430_firmware
- qualcomm:qcm6490_firmware
- qualcomm:qcs5430_firmware
- qualcomm:qcs6490_firmware
- qualcomm:sc8380xp_firmware
- qualcomm:snapdragon_7c\+_gen_3_compute_firmware
- qualcomm:snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\)_firmware
- qualcomm:snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\)_firmware
- qualcomm:video_collaboration_vc3_platform_firmware
- qualcomm:wcd9370_firmware
- qualcomm:wcd9375_firmware
- qualcomm:wcd9380_firmware
- qualcomm:wcd9385_firmware
- qualcomm:wsa8830_firmware
- qualcomm:wsa8835_firmware
- qualcomm:wsa8840_firmware
- qualcomm:wsa8845_firmware
- qualcomm:wsa8845h_firmware
References
Check your stackJSON