CVE-2025-27060

HighCVSS 8.8/10Last modified Oct 8, 2026

Description

Memory corruption while performing SCM call with malformed inputs.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-822

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonImmersive Home 214 Platform; Immersive Home 216 Platform; Immersive Home 316 Platform; Immersive Home 318 Platform; IPQ5010; IPQ5028; QCN6023; QCN6024; QCN6100; QCN6102; QCN6112; QCN6122; QCN6132; QCN9000; QCN9001; QCN9002; QCN9003; QCN9012; QCN9022; QCN9024

References

Timeline

Published
Oct 9, 2025
Last modified
Oct 8, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-270617.8Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.CVE-2025-270627.8Memory corruption while handling client exceptions, allowing unauthorized channel access.CVE-2025-270637.8Memory corruption during video playback when video session open fails with time out error.CVE-2025-270646.1Information disclosure while registering commands from clients with diag through diagHal.CVE-2025-270657.5Transient DOS while processing a frame with malformed shared-key descriptor.CVE-2025-270667.5Transient DOS while processing an ANQP message.CVE-2025-270677.8Memory corruption while processing DDI call with invalid buffer.CVE-2025-270687.8Memory corruption while processing an IOCTL command with an arbitrary address.CVE-2025-270697.8Memory corruption while processing DDI command calls.CVE-2025-27079.1A vulnerability was determined in zhijiantianya ruoyi-vue-pro 2.4.1. This impacts an unknown function of the file /app-api/infra/file/uploadCVE-2025-270707.8Memory corruption while performing encryption and decryption commands.CVE-2025-270719.8Memory corruption while processing specific files in Powerline Communication Firmware.
CVE-2025-27060: High severity, CVSS 8.8 | Vulnix