CVE-2025-27040

MediumCVSS 6.5/10Last modified Oct 8, 2026

Description

Information disclosure may occur while processing the hypervisor log.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonCSR8811; Immersive Home 214 Platform; Immersive Home 216 Platform; Immersive Home 316 Platform; Immersive Home 318 Platform; IPQ5010; IPQ5028; IPQ8070; IPQ8070A; IPQ8071; IPQ8071A; IPQ8072; IPQ8072A; IPQ8074; IPQ8074A; IPQ8076; IPQ8076A; IPQ8078; IPQ8078A; IPQ8173

References

Timeline

Published
Oct 9, 2025
Last modified
Oct 8, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-270415.5Transient DOS while processing video packets received from video firmware.CVE-2025-270427.8Memory corruption while processing video packets received from video firmware.CVE-2025-270437.8Memory corruption while processing manipulated payload in video firmware.CVE-2025-270447.8Memory corruption while executing timestamp video decode command with large input values.CVE-2025-270456.1Information disclosure while processing batch command execution in Video driver.CVE-2025-270467.8Memory corruption while processing multiple simultaneous escape calls.CVE-2025-270477.8Memory corruption while processing the TESTPATTERNCONFIG escape path.CVE-2025-270487.8Memory corruption while processing camera platform driver IOCTL calls.CVE-2025-270495.5Transient DOS while processing IOCTL call for image encoding.CVE-2025-27057.3A vulnerability classified as critical has been found in Digiwin ERP 5.1. Affected is the function DoUpload/DoWebUpload of the file /Api/FilCVE-2025-270507.8Memory corruption while processing event close when client process terminates abruptly.CVE-2025-270517.8Memory corruption while processing command message in WLAN Host.
CVE-2025-27040: Medium severity, CVSS 6.5 | Vulnix