CVE-2025-27049

MediumCVSS 5.5/10Last modified Oct 8, 2026

Description

Transient DOS while processing IOCTL call for image encoding.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-126

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonFastConnect 6700; FastConnect 6900; FastConnect 7800; QCC2072; QCM5430; QCM6490; QCS5430; QCS6490; Qualcomm Video Collaboration VC3 Platform; SC8380XP; Snapdragon 7c+ Gen 3 Compute; Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB); WCD9370; WCD9375; WCD9378C; WCD9380; WCD9385; WSA8830; WSA8835; WSA8840

References

Timeline

Published
Oct 9, 2025
Last modified
Oct 8, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-27057.3A vulnerability classified as critical has been found in Digiwin ERP 5.1. Affected is the function DoUpload/DoWebUpload of the file /Api/FilCVE-2025-270507.8Memory corruption while processing event close when client process terminates abruptly.CVE-2025-270517.8Memory corruption while processing command message in WLAN Host.CVE-2025-270527.8Memory corruption while processing data packets in diag received from Unix clients.CVE-2025-270537.8Memory corruption during PlayReady APP usecase while processing TA commands.CVE-2025-270547.8Memory corruption while processing a malformed license file during reboot.CVE-2025-270557.8Memory corruption during the image encoding process.CVE-2025-270567.8Memory corruption during sub-system restart while processing clean-up to free up resources.CVE-2025-270577.5Transient DOS while handling beacon frames with invalid IE header length.CVE-2025-270587.8Memory corruption while processing packet data with exceedingly large packet.CVE-2025-270598.8Memory corruption while performing SCM call.CVE-2025-27066.3A vulnerability classified as critical was found in Digiwin ERP 5.0.1. Affected by this vulnerability is an unknown functionality of the fil
CVE-2025-27049: Medium severity, CVSS 5.5 | Vulnix