CVE-2025-27068

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption while processing an IOCTL command with an arbitrary address.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-126

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonFastConnect 6200; FastConnect 6900; FastConnect 7800; SC8380XP; SM6250; Snapdragon 7c Compute Platform (SC7180-AC); Snapdragon 7c Gen 2 Compute Platform (SC7180-AD) "Rennell Pro"; Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB); WCD9380; WCD9385; WSA8830; WSA8835; WSA8840; WSA8845; WSA8845H

References

Timeline

Published
Aug 6, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-270697.8Memory corruption while processing DDI command calls.CVE-2025-27079.1A vulnerability was determined in zhijiantianya ruoyi-vue-pro 2.4.1. This impacts an unknown function of the file /app-api/infra/file/uploadCVE-2025-270707.8Memory corruption while performing encryption and decryption commands.CVE-2025-270719.8Memory corruption while processing specific files in Powerline Communication Firmware.CVE-2025-270725.5Information disclosure while processing a packet at EAVB BE side with invalid header length.CVE-2025-270737.5Transient DOS while creating NDP instance.CVE-2025-270747.8Memory corruption while processing a GP command response.CVE-2025-270757.8Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host.CVE-2025-270767.0Memory corruption while processing simultaneous requests via escape path.CVE-2025-270777.8Memory corruption while processing message in guest VM.CVE-2025-270786.5A vulnerability in a system binary of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to inject commands into the uCVE-2025-270796.0A vulnerability in the file creation process on the command line interface of AOS-8 Instant and AOS-10 AP could allow an authenticated remot
CVE-2025-27068: High severity, CVSS 7.8 | Vulnix