First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-27045

MediumCVSS 6.1/10Last modified Oct 8, 2026

Description

Information disclosure while processing batch command execution in Video driver.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Weakness enumeration

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	FastConnect 6900; FastConnect 7800; QCC2072; SC8380XP; WCD9378C; WCD9380; WCD9385; WSA8840; WSA8845; WSA8845H; X2000077; X2000086; X2000090; X2000092; X2000094; XG101002; XG101032; XG101039

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.htmlVendor Advisory

Timeline

Published: Oct 9, 2025
Last modified: Oct 8, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-270467.8Memory corruption while processing multiple simultaneous escape calls.CVE-2025-270477.8Memory corruption while processing the TESTPATTERNCONFIG escape path.CVE-2025-270487.8Memory corruption while processing camera platform driver IOCTL calls.CVE-2025-270495.5Transient DOS while processing IOCTL call for image encoding.CVE-2025-27057.3A vulnerability classified as critical has been found in Digiwin ERP 5.1. Affected is the function DoUpload/DoWebUpload of the file /Api/Fil CVE-2025-270507.8Memory corruption while processing event close when client process terminates abruptly.CVE-2025-270517.8Memory corruption while processing command message in WLAN Host.CVE-2025-270527.8Memory corruption while processing data packets in diag received from Unix clients.CVE-2025-270537.8Memory corruption during PlayReady APP usecase while processing TA commands.CVE-2025-270547.8Memory corruption while processing a malformed license file during reboot.CVE-2025-270557.8Memory corruption during the image encoding process.CVE-2025-270567.8Memory corruption during sub-system restart while processing clean-up to free up resources.

CVE-2025-27045: Medium severity, CVSS 6.1 | Vulnix