CVE-2025-27060

HighCVSS 8.8/10Last modified Oct 8, 2026

Description

Memory corruption while performing SCM call with malformed inputs.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-822

Affected software

No affected versions have been published.

Timeline

Published
Oct 9, 2025
Last modified
Oct 8, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-270617.8Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.CVE-2025-270627.8Memory corruption while handling client exceptions, allowing unauthorized channel access.CVE-2025-270637.8Memory corruption during video playback when video session open fails with time out error.CVE-2025-270646.1Information disclosure while registering commands from clients with diag through diagHal.CVE-2025-270657.5Transient DOS while processing a frame with malformed shared-key descriptor.CVE-2025-270667.5Transient DOS while processing an ANQP message.CVE-2025-270677.8Memory corruption while processing DDI call with invalid buffer.CVE-2025-270687.8Memory corruption while processing an IOCTL command with an arbitrary address.CVE-2025-270697.8Memory corruption while processing DDI command calls.CVE-2025-27079.1A vulnerability, which was classified as critical, has been found in zhijiantianya ruoyi-vue-pro 2.4.1. Affected by this issue is some unknoCVE-2025-270707.8Memory corruption while performing encryption and decryption commands.CVE-2025-270719.8Memory corruption while processing specific files in Powerline Communication Firmware.
CVE-2025-27060: High severity, CVSS 8.8 | Vulnix