CVE-2025-27057

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Transient DOS while handling beacon frames with invalid IE header length.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-126CWE-125

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAR8035; CSR8811; FastConnect 6700; FastConnect 6900; FastConnect 7800; Immersive Home 214 Platform; Immersive Home 216 Platform; Immersive Home 316 Platform; Immersive Home 318 Platform; Immersive Home 3210 Platform; Immersive Home 326 Platform; IPQ5010; IPQ5028; IPQ5300; IPQ5302; IPQ5312; IPQ5332; IPQ5424; IPQ6000; IPQ6010

References

Timeline

Published
Jul 8, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-270587.8Memory corruption while processing packet data with exceedingly large packet.CVE-2025-270598.8Memory corruption while performing SCM call.CVE-2025-27066.3A vulnerability classified as critical was found in Digiwin ERP 5.0.1. Affected by this vulnerability is an unknown functionality of the filCVE-2025-270608.8Memory corruption while performing SCM call with malformed inputs.CVE-2025-270617.8Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.CVE-2025-270627.8Memory corruption while handling client exceptions, allowing unauthorized channel access.CVE-2025-270637.8Memory corruption during video playback when video session open fails with time out error.CVE-2025-270646.1Information disclosure while registering commands from clients with diag through diagHal.CVE-2025-270657.5Transient DOS while processing a frame with malformed shared-key descriptor.CVE-2025-270667.5Transient DOS while processing an ANQP message.CVE-2025-270677.8Memory corruption while processing DDI call with invalid buffer.CVE-2025-270687.8Memory corruption while processing an IOCTL command with an arbitrary address.
CVE-2025-27057: High severity, CVSS 7.5 | Vulnix