CVE-2025-27059

HighCVSS 8.8/10Last modified Oct 8, 2026

Description

Memory corruption while performing SCM call.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-823

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonImmersive Home 214 Platform; Immersive Home 216 Platform; Immersive Home 316 Platform; Immersive Home 318 Platform; IPQ5010; IPQ5028; QCN6023; QCN6024; QCN6100; QCN6102; QCN6112; QCN6122; QCN6132; QCN9000; QCN9001; QCN9002; QCN9003; QCN9012; QCN9022; QCN9024

References

Timeline

Published
Oct 9, 2025
Last modified
Oct 8, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-27066.3A vulnerability classified as critical was found in Digiwin ERP 5.0.1. Affected by this vulnerability is an unknown functionality of the filCVE-2025-270608.8Memory corruption while performing SCM call with malformed inputs.CVE-2025-270617.8Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.CVE-2025-270627.8Memory corruption while handling client exceptions, allowing unauthorized channel access.CVE-2025-270637.8Memory corruption during video playback when video session open fails with time out error.CVE-2025-270646.1Information disclosure while registering commands from clients with diag through diagHal.CVE-2025-270657.5Transient DOS while processing a frame with malformed shared-key descriptor.CVE-2025-270667.5Transient DOS while processing an ANQP message.CVE-2025-270677.8Memory corruption while processing DDI call with invalid buffer.CVE-2025-270687.8Memory corruption while processing an IOCTL command with an arbitrary address.CVE-2025-270697.8Memory corruption while processing DDI command calls.CVE-2025-27079.1A vulnerability was determined in zhijiantianya ruoyi-vue-pro 2.4.1. This impacts an unknown function of the file /app-api/infra/file/upload
CVE-2025-27059: High severity, CVSS 8.8 | Vulnix