CVE-2025-27074

HighCVSS 7.8/10Last modified Oct 18, 2026

Description

Memory corruption while processing a GP command response.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-131

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAPQ8064AU; CSR8811; Immersive Home 214 Platform; Immersive Home 216 Platform; Immersive Home 316 Platform; Immersive Home 318 Platform; IPQ5010; IPQ5028; IPQ8070; IPQ8070A; IPQ8071; IPQ8071A; IPQ8072; IPQ8072A; IPQ8074; IPQ8074A; IPQ8076; IPQ8076A; IPQ8078; IPQ8078A

References

Timeline

Published
Nov 4, 2025
Last modified
Oct 18, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-270757.8Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host.CVE-2025-270767.0Memory corruption while processing simultaneous requests via escape path.CVE-2025-270777.8Memory corruption while processing message in guest VM.CVE-2025-270786.5A vulnerability in a system binary of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to inject commands into the uCVE-2025-270796.0A vulnerability in the file creation process on the command line interface of AOS-8 Instant and AOS-10 AP could allow an authenticated remotCVE-2025-27089.1A vulnerability was identified in zhijiantianya ruoyi-vue-pro 2.4.1. Affected is an unknown function of the file /admin-api/infra/file/uploaCVE-2025-270806.0Vulnerabilities in the command line interface of AOS-CX could allow an authenticated remote attacker to expose sensitive information. SuccesCVE-2025-270816.8A potential security vulnerability in HPE NonStop OSM Service Connection Suite could potentially be exploited to allow a local Denial of SerCVE-2025-270827.2Arbitrary File Write vulnerabilities exist in the web-based management interface of both the AOS-10 GW and AOS-8 Controller/Mobility ConductCVE-2025-270837.2Authenticated command injection vulnerabilities exist in the AOS-10 GW and AOS-8 Controller/Mobility Conductor web-based management interfacCVE-2025-270846.1A vulnerability in the Captive Portal of an AOS-10 GW and AOS-8 Controller/Mobility Conductor could allow a remote attacker to conduct a refCVE-2025-270854.9Multiple vulnerabilities exist in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor. Successful exploi