CVE-2025-27036

MediumCVSS 6.1/10Last modified Sep 26, 2026

Description

Information disclosure when Video engine escape input data is less than expected minimum size.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Weakness enumeration

CWE-126

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonFastConnect 6700; FastConnect 6900; FastConnect 7800; QCM5430; QCM6490; QCS5430; QCS6490; Qualcomm Video Collaboration VC3 Platform; SC8380XP; Snapdragon 7c+ Gen 3 Compute; Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB); WCD9370; WCD9375; WCD9380; WCD9385; WSA8830; WSA8835; WSA8840; WSA8845; WSA8845H

References

Timeline

Published
Sep 24, 2025
Last modified
Sep 26, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-270377.8Memory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffers.CVE-2025-270387.5Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.CVE-2025-270396.6Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request.CVE-2025-27047.5OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting CVE-2025-270406.5Information disclosure may occur while processing the hypervisor log.CVE-2025-270415.5Transient DOS while processing video packets received from video firmware.CVE-2025-270427.8Memory corruption while processing video packets received from video firmware.CVE-2025-270437.8Memory corruption while processing manipulated payload in video firmware.CVE-2025-270447.8Memory corruption while executing timestamp video decode command with large input values.CVE-2025-270456.1Information disclosure while processing batch command execution in Video driver.CVE-2025-270467.8Memory corruption while processing multiple simultaneous escape calls.CVE-2025-270477.8Memory corruption while processing the TESTPATTERNCONFIG escape path.
CVE-2025-27036: Medium severity, CVSS 6.1 | Vulnix