CVE-2025-27062

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption while handling client exceptions, allowing unauthorized channel access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

VendorProductVersions
Qualcomm, Inc.Snapdragon315 5G IoT Modem; APQ8064AU; AR8035; C-V2X 9150; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; FastConnect 6900; FastConnect 7800; MDM9650; MSM8996AU; QAM8255P; QAM8295P; QAM8620P; QAM8650P; QAM8775P; QAMSRV1H; QAMSRV1M; QCA6174A

References

Timeline

Published
Aug 6, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-270637.8Memory corruption during video playback when video session open fails with time out error.CVE-2025-270646.1Information disclosure while registering commands from clients with diag through diagHal.CVE-2025-270657.5Transient DOS while processing a frame with malformed shared-key descriptor.CVE-2025-270667.5Transient DOS while processing an ANQP message.CVE-2025-270677.8Memory corruption while processing DDI call with invalid buffer.CVE-2025-270687.8Memory corruption while processing an IOCTL command with an arbitrary address.CVE-2025-270697.8Memory corruption while processing DDI command calls.CVE-2025-27079.1A vulnerability was determined in zhijiantianya ruoyi-vue-pro 2.4.1. This impacts an unknown function of the file /app-api/infra/file/uploadCVE-2025-270707.8Memory corruption while performing encryption and decryption commands.CVE-2025-270719.8Memory corruption while processing specific files in Powerline Communication Firmware.CVE-2025-270725.5Information disclosure while processing a packet at EAVB BE side with invalid header length.CVE-2025-270737.5Transient DOS while creating NDP instance.
CVE-2025-27062: High severity, CVSS 7.8 | Vulnix