CVE-2025-27064

MediumCVSS 6.1/10Last modified Oct 18, 2026

Description

Information disclosure while registering commands from clients with diag through diagHal.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Weakness enumeration

CWE-126

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonFastConnect 6900; FastConnect 7800; Immersive Home 3210 Platform; Immersive Home 326 Platform; IPQ5300; IPQ5302; IPQ5312; IPQ5332; IPQ5424; IPQ9008; IPQ9048; IPQ9554; IPQ9570; IPQ9574; MDM9628; QAM8255P; QAM8650P; QCA0000; QCA6564A; QCA6564AU

References

Timeline

Published
Nov 4, 2025
Last modified
Oct 18, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-270657.5Transient DOS while processing a frame with malformed shared-key descriptor.CVE-2025-270667.5Transient DOS while processing an ANQP message.CVE-2025-270677.8Memory corruption while processing DDI call with invalid buffer.CVE-2025-270687.8Memory corruption while processing an IOCTL command with an arbitrary address.CVE-2025-270697.8Memory corruption while processing DDI command calls.CVE-2025-27079.1A vulnerability was determined in zhijiantianya ruoyi-vue-pro 2.4.1. This impacts an unknown function of the file /app-api/infra/file/uploadCVE-2025-270707.8Memory corruption while performing encryption and decryption commands.CVE-2025-270719.8Memory corruption while processing specific files in Powerline Communication Firmware.CVE-2025-270725.5Information disclosure while processing a packet at EAVB BE side with invalid header length.CVE-2025-270737.5Transient DOS while creating NDP instance.CVE-2025-270747.8Memory corruption while processing a GP command response.CVE-2025-270757.8Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host.
CVE-2025-27064: Medium severity, CVSS 6.1 | Vulnix