CVE-2025-27037

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffers.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonFastConnect 6800; FastConnect 6900; FastConnect 7800; QAM8295P; QCA6391; QCA6426; QCA6436; QCA6574AU; QCA6696; QCN9074; SA6145P; SA6150P; SA6155P; SA8145P; SA8150P; SA8155P; SA8195P; SA8295P; SD865 5G; Snapdragon 8 Gen 1 Mobile Platform

References

Timeline

Published
Sep 24, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-270387.5Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.CVE-2025-270396.6Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request.CVE-2025-27047.5OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting CVE-2025-270406.5Information disclosure may occur while processing the hypervisor log.CVE-2025-270415.5Transient DOS while processing video packets received from video firmware.CVE-2025-270427.8Memory corruption while processing video packets received from video firmware.CVE-2025-270437.8Memory corruption while processing manipulated payload in video firmware.CVE-2025-270447.8Memory corruption while executing timestamp video decode command with large input values.CVE-2025-270456.1Information disclosure while processing batch command execution in Video driver.CVE-2025-270467.8Memory corruption while processing multiple simultaneous escape calls.CVE-2025-270477.8Memory corruption while processing the TESTPATTERNCONFIG escape path.CVE-2025-270487.8Memory corruption while processing camera platform driver IOCTL calls.
CVE-2025-27037: High severity, CVSS 7.8 | Vulnix