CVE-2025-27060

HIGH

8.8

Descricao

Memory corruption while performing SCM call with malformed inputs.

Detalhes CVE

Pontuacao CVSS v3.18.8

SeveridadeHIGH

Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Vetor de ataqueLOCAL

ComplexidadeLOW

Privilegios necessariosLOW

Interacao do usuarioNONE

Publicado10/9/2025

Ultima modificacao10/21/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

qualcomm:immersive_home_214_platformqualcomm:immersive_home_214_platform_firmwarequalcomm:immersive_home_216_platformqualcomm:immersive_home_216_platform_firmwarequalcomm:immersive_home_316_platformqualcomm:immersive_home_316_platform_firmwarequalcomm:immersive_home_318_platformqualcomm:immersive_home_318_platform_firmwarequalcomm:ipq5010qualcomm:ipq5010_firmwarequalcomm:ipq5028qualcomm:ipq5028_firmwarequalcomm:qcn6023qualcomm:qcn6023_firmwarequalcomm:qcn6024qualcomm:qcn6024_firmwarequalcomm:qcn6100qualcomm:qcn6100_firmwarequalcomm:qcn6102qualcomm:qcn6102_firmwarequalcomm:qcn6112qualcomm:qcn6112_firmwarequalcomm:qcn6122qualcomm:qcn6122_firmwarequalcomm:qcn6132qualcomm:qcn6132_firmwarequalcomm:qcn9000qualcomm:qcn9000_firmwarequalcomm:qcn9001qualcomm:qcn9001_firmwarequalcomm:qcn9002qualcomm:qcn9002_firmwarequalcomm:qcn9003qualcomm:qcn9003_firmwarequalcomm:qcn9012qualcomm:qcn9012_firmwarequalcomm:qcn9022qualcomm:qcn9022_firmwarequalcomm:qcn9024qualcomm:qcn9024_firmwarequalcomm:qcn9070qualcomm:qcn9070_firmwarequalcomm:qcn9072qualcomm:qcn9072_firmwarequalcomm:qcn9074qualcomm:qcn9074_firmwarequalcomm:qcn9100qualcomm:qcn9100_firmwarequalcomm:qcn9274qualcomm:qcn9274_firmware

Fraquezas (CWE)

CWE-822

Referencias

https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html(product-security@qualcomm.com)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.