First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-27029

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Transient DOS while processing the tone measurement response buffer when the response buffer is out of range.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	FastConnect 7800; Immersive Home 3210 Platform; Immersive Home 326 Platform; IPQ5300; IPQ5302; IPQ5312; IPQ5332; IPQ5424; IPQ9008; IPQ9048; IPQ9554; IPQ9570; IPQ9574; QCA0000; QCA8075; QCA8080; QCA8081; QCA8082; QCA8084; QCA8085

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.htmlVendor Advisory

Timeline

Published: Jun 3, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-27036.8The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. A user with Editor permissions is able to modify such a panel in or CVE-2025-270306.1information disclosure while invoking calibration data from user space to update firmware size.CVE-2025-270317.8memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed.CVE-2025-270327.8memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.CVE-2025-270336.1Information disclosure while running video usecase having rogue firmware.CVE-2025-270349.8Memory corruption while selecting the PLMN from SOR failed list.CVE-2025-270366.1Information disclosure when Video engine escape input data is less than expected minimum size.CVE-2025-270377.8Memory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffers.CVE-2025-270387.5Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.CVE-2025-270396.6Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request.CVE-2025-27047.5OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting CVE-2025-270406.5Information disclosure may occur while processing the hypervisor log.

CVE-2025-27029: High severity, CVSS 7.5 | Vulnix