CVE-2025-27060

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-27060", "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "state": "PUBLISHED", "assignerShortName": "qualcomm", "dateReserved": "2025-02-18T09:19:46.887Z", "datePublished": "2025-10-09T03:18:06.050Z", "dateUpdated": "2026-02-26T17:48:06.737Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Snapdragon Wired Infrastructure and Networking"], "product": "Snapdragon", "vendor": "Qualcomm, Inc.", "versions": [{"status": "affected", "version": "Immersive Home 214 Platform"}, {"status": "affected", "version": "Immersive Home 216 Platform"}, {"status": "affected", "version": "Immersive Home 316 Platform"}, {"status": "affected", "version": "Immersive Home 318 Platform"}, {"status": "affected", "version": "IPQ5010"}, {"status": "affected", "version": "IPQ5028"}, {"status": "affected", "version": "QCN6023"}, {"status": "affected", "version": "QCN6024"}, {"status": "affected", "version": "QCN6100"}, {"status": "affected", "version": "QCN6102"}, {"status": "affected", "version": "QCN6112"}, {"status": "affected", "version": "QCN6122"}, {"status": "affected", "version": "QCN6132"}, {"status": "affected", "version": "QCN9000"}, {"status": "affected", "version": "QCN9001"}, {"status": "affected", "version": "QCN9002"}, {"status": "affected", "version": "QCN9003"}, {"status": "affected", "version": "QCN9012"}, {"status": "affected", "version": "QCN9022"}, {"status": "affected", "version": "QCN9024"}, {"status": "affected", "version": "QCN9070"}, {"status": "affected", "version": "QCN9072"}, {"status": "affected", "version": "QCN9074"}, {"status": "affected", "version": "QCN9100"}, {"status": "affected", "version": "QCN9274"}]}], "descriptions": [{"lang": "en", "value": "Memory corruption while performing SCM call with malformed inputs."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-822", "description": "CWE-822 Untrusted Pointer Dereference", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "shortName": "qualcomm", "dateUpdated": "2025-10-09T03:18:06.050Z"}, "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html"}], "title": "Untrusted Pointer Dereference in TZ Firmware"}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-27060", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-10-10T03:55:15.303974Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-26T17:48:06.737Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-27060", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-10-09T18:35:46.729357Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-09T18:35:54.787Z"}}], "cna": {"title": "Untrusted Pointer Dereference in TZ Firmware", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Qualcomm, Inc.", "product": "Snapdragon", "versions": [{"status": "affected", "version": "Immersive Home 214 Platform"}, {"status": "affected", "version": "Immersive Home 216 Platform"}, {"status": "affected", "version": "Immersive Home 316 Platform"}, {"status": "affected", "version": "Immersive Home 318 Platform"}, {"status": "affected", "version": "IPQ5010"}, {"status": "affected", "version": "IPQ5028"}, {"status": "affected", "version": "QCN6023"}, {"status": "affected", "version": "QCN6024"}, {"status": "affected", "version": "QCN6100"}, {"status": "affected", "version": "QCN6102"}, {"status": "affected", "version": "QCN6112"}, {"status": "affected", "version": "QCN6122"}, {"status": "affected", "version": "QCN6132"}, {"status": "affected", "version": "QCN9000"}, {"status": "affected", "version": "QCN9001"}, {"status": "affected", "version": "QCN9002"}, {"status": "affected", "version": "QCN9003"}, {"status": "affected", "version": "QCN9012"}, {"status": "affected", "version": "QCN9022"}, {"status": "affected", "version": "QCN9024"}, {"status": "affected", "version": "QCN9070"}, {"status": "affected", "version": "QCN9072"}, {"status": "affected", "version": "QCN9074"}, {"status": "affected", "version": "QCN9100"}, {"status": "affected", "version": "QCN9274"}], "platforms": ["Snapdragon Wired Infrastructure and Networking"], "defaultStatus": "unaffected"}], "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html"}], "descriptions": [{"lang": "en", "value": "Memory corruption while performing SCM call with malformed inputs."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-822", "description": "CWE-822 Untrusted Pointer Dereference"}]}], "providerMetadata": {"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "shortName": "qualcomm", "dateUpdated": "2025-10-09T03:18:06.050Z"}}}, "cveMetadata": {"cveId": "CVE-2025-27060", "state": "PUBLISHED", "dateUpdated": "2025-10-10T03:55:14.781Z", "dateReserved": "2025-02-18T09:19:46.887Z", "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "datePublished": "2025-10-09T03:18:06.050Z", "assignerShortName": "qualcomm"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["Snapdragon Wired Infrastructure and Networking"], "product": "Snapdragon", "vendor": "Qualcomm, Inc.", "versions": [{"status": "affected", "version": "Immersive Home 214 Platform"}, {"status": "affected", "version": "Immersive Home 216 Platform"}, {"status": "affected", "version": "Immersive Home 316 Platform"}, {"status": "affected", "version": "Immersive Home 318 Platform"}, {"status": "affected", "version": "IPQ5010"}, {"status": "affected", "version": "IPQ5028"}, {"status": "affected", "version": "QCN6023"}, {"status": "affected", "version": "QCN6024"}, {"status": "affected", "version": "QCN6100"}, {"status": "affected", "version": "QCN6102"}, {"status": "affected", "version": "QCN6112"}, {"status": "affected", "version": "QCN6122"}, {"status": "affected", "version": "QCN6132"}, {"status": "affected", "version": "QCN9000"}, {"status": "affected", "version": "QCN9001"}, {"status": "affected", "version": "QCN9002"}, {"status": "affected", "version": "QCN9003"}, {"status": "affected", "version": "QCN9012"}, {"status": "affected", "version": "QCN9022"}, {"status": "affected", "version": "QCN9024"}, {"status": "affected", "version": "QCN9070"}, {"status": "affected", "version": "QCN9072"}, {"status": "affected", "version": "QCN9074"}, {"status": "affected", "version": "QCN9100"}, {"status": "affected", "version": "QCN9274"}]}], "source": "product-security@qualcomm.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:immersive_home_214_platform_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4C241123-63B1-4CA2-A3CB-BADA86EAAA2E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:immersive_home_214_platform:-:*:*:*:*:*:*:*", "matchCriteriaId": "66E4B95D-966A-4940-A403-9E8241F121C2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:immersive_home_216_platform_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "68309F58-91D9-407E-9578-17EAF6836E07", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:immersive_home_216_platform:-:*:*:*:*:*:*:*", "matchCriteriaId": "A0D491A9-6A1F-4B62-9A30-5A9F592BD5B5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:immersive_home_316_platform_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "AA6CA3E5-7A0F-4705-985E-0C25DE609494", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:immersive_home_316_platform:-:*:*:*:*:*:*:*", "matchCriteriaId": "8DC770BF-4B23-4F43-A0B9-E5FE41536F5E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:immersive_home_318_platform_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "84B4531C-9D90-4A9B-8724-1428372319C8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:immersive_home_318_platform:-:*:*:*:*:*:*:*", "matchCriteriaId": "497EC79B-0879-4FA2-A5B7-63EA54FC20A5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:ipq5010_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "8543C671-054B-489F-ACFE-B7D7BEC1DEE6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:ipq5010:-:*:*:*:*:*:*:*", "matchCriteriaId": "15C5F8CB-3291-4E13-94F0-680FC85A9669", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:ipq5028_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5AE3085F-59BE-46A0-9A96-65CFAB7DFEAE", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:ipq5028:-:*:*:*:*:*:*:*", "matchCriteriaId": "825524E0-BB01-4CAD-9F65-95E096467D28", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn6023_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "63FF89C5-3BBF-4A13-8A3B-F490C2FA1A95", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn6023:-:*:*:*:*:*:*:*", "matchCriteriaId": "6784EC5F-2C26-49C5-9A03-6FD2056C04EF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn6024_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A49DBE04-E2EA-4DA1-B774-A878A71524AC", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn6024:-:*:*:*:*:*:*:*", "matchCriteriaId": "69E98386-3BB2-4E8C-AD00-E05123608439", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn6100_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4730B8E7-C884-4AFA-ACB5-D0F39A993D18", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn6100:-:*:*:*:*:*:*:*", "matchCriteriaId": "98CB565F-FE4A-4B52-96CB-AA769E985230", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn6102_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C37D96A3-0466-4FC4-9E56-35B55C3FA970", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn6102:-:*:*:*:*:*:*:*", "matchCriteriaId": "9D55BAB4-2AC5-419C-B405-C1AA022DAA24", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn6112_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6300827E-F6F0-490B-8043-38DD415E3161", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn6112:-:*:*:*:*:*:*:*", "matchCriteriaId": "58F6B4C5-2C26-4A13-BA10-5B70805AD8B6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn6122_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1A988BD3-71D8-4F2B-9EC2-8E385B114114", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn6122:-:*:*:*:*:*:*:*", "matchCriteriaId": "1E7049A3-9F35-465F-9B2E-96788E54EC63", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn6132_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A59FBBDC-0495-422C-B25A-FFDF94D33C34", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn6132:-:*:*:*:*:*:*:*", "matchCriteriaId": "F6E55C06-45EE-4144-8CBC-4D41DDE4D899", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn9000_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5BCCFF8B-4857-439D-BD4A-EB35672F474B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn9000:-:*:*:*:*:*:*:*", "matchCriteriaId": "86896D55-89F5-440B-9082-916E486B65D9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn9001_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E02C2FD8-3434-4407-99E3-EE1779C18117", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn9001:-:*:*:*:*:*:*:*", "matchCriteriaId": "AC3468C1-CF50-4ED2-BD91-D1D140653CFC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn9002_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6694BAC2-6E3B-4589-8BEA-6B5219267D19", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn9002:-:*:*:*:*:*:*:*", "matchCriteriaId": "EF54E749-D512-45DE-841D-6199623C7099", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn9003_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6128C715-8085-47A8-9EE3-F8C67FC1236B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn9003:-:*:*:*:*:*:*:*", "matchCriteriaId": "73B9F6F0-2F3A-4A4E-91A1-39EE598E22A5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn9012_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "61F34DD2-9DC0-49E5-BC85-1543EA199477", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn9012:-:*:*:*:*:*:*:*", "matchCriteriaId": "1A06879F-6FE9-448A-8186-8347D76F872B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn9022_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "36A10EB2-E7A2-461F-836E-FC38B9428C98", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn9022:-:*:*:*:*:*:*:*", "matchCriteriaId": "A457C1D6-A026-4B5F-9CB1-FA795785A515", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn9024_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A64CDA49-19BF-413F-A0E0-2B9729E45E25", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn9024:-:*:*:*:*:*:*:*", "matchCriteriaId": "345CCD64-C09E-407D-AAA2-311C4CCFE24F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn9070_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "2C10CAAC-FD93-4116-9F0C-E983B3693FAF", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn9070:-:*:*:*:*:*:*:*", "matchCriteriaId": "9FEC2402-BA39-49BB-A34C-FF32ED44A158", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn9072_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "809FD84D-11C5-4EE3-B830-62CF5F6CB1BC", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn9072:-:*:*:*:*:*:*:*", "matchCriteriaId": "DFD77A52-D53C-424F-9E17-160B710469C3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn9074_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "65303C2D-C6BF-47CB-8146-E240CB8BBE42", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn9074:-:*:*:*:*:*:*:*", "matchCriteriaId": "A6B03022-497A-4F42-BB4D-5624EA7DF1B9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn9100_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "B31EEE9E-CDEC-4E88-B950-3413205E483E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn9100:-:*:*:*:*:*:*:*", "matchCriteriaId": "3E1E341A-7DDD-47E5-BB5F-0666482B41C0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn9274_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "9129A244-AB8C-4AA4-BFBB-37F84D66BD3E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn9274:-:*:*:*:*:*:*:*", "matchCriteriaId": "41F243A1-3C0B-4780-95BF-69A4E1A91F18", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Memory corruption while performing SCM call with malformed inputs."}, {"lang": "es", "value": "Corrupci\u00f3n de memoria al realizar una llamada SCM con entradas malformadas."}], "id": "CVE-2025-27060", "lastModified": "2026-10-08T13:10:00.200", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.0, "impactScore": 6.0, "source": "product-security@qualcomm.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-27060", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-10-10T03:55:15.303974Z", "version": "2.0.3"}}]}, "published": "2025-10-09T04:16:45.550", "references": [{"source": "product-security@qualcomm.com", "tags": ["Vendor Advisory"], "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html"}], "sourceIdentifier": "product-security@qualcomm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-822"}], "source": "product-security@qualcomm.com", "type": "Secondary"}]}

{}

{"created": "2025-10-09T12:51:18.650382+00:00", "updated": "2025-10-09T12:51:18.650407+00:00", "vendors": ["qualcomm", "qualcomm$PRODUCT$snapdragon"]}