Memory Corruption Vulnerability in Qualcomm Products
CVE-2025-27059

8.8HIGH

Key Information:

Vendor

Qualcomm
Status
Snapdragon
Vendor
CVE Published:
9 October 2025

What is CVE-2025-27059?

This vulnerability involves memory corruption that occurs during the execution of SCM (Secure Control Manager) calls in Qualcomm chipsets. Exploitation of this flaw could allow an attacker to execute arbitrary code in the affected products, potentially leading to unauthorized access and manipulation of sensitive data. Users are advised to ensure that their devices are updated with the latest security patches provided by Qualcomm to mitigate the risks associated with this vulnerability.

Affected Version(s)

Snapdragon Snapdragon Wired Infrastructure and Networking Immersive Home 214 Platform

Snapdragon Snapdragon Wired Infrastructure and Networking Immersive Home 216 Platform

Snapdragon Snapdragon Wired Infrastructure and Networking Immersive Home 316 Platform

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-27059 : Memory Corruption Vulnerability in Qualcomm Products