Memory Corruption Vulnerability in Qualcomm Video Decoding Process
CVE-2025-27044

7.8HIGH

Key Information:

Vendor

Qualcomm
Status
Snapdragon
Vendor
CVE Published:
8 July 2025

What is CVE-2025-27044?

A memory corruption issue has been identified in Qualcomm's video decoding software, triggered by improper handling of large input values during the execution of timestamp video decode commands. This vulnerability can potentially lead to arbitrary code execution and other security risks within affected systems, emphasizing the need for immediate attention and software updates.

Affected Version(s)

Snapdragon Snapdragon Compute FastConnect 6900

Snapdragon Snapdragon Compute FastConnect 7800

Snapdragon Snapdragon Compute SC8380XP

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-27044 : Memory Corruption Vulnerability in Qualcomm Video Decoding Process