Memory Corruption in Qualcomm Products via DDI Command Calls
CVE-2025-27069

7.8HIGH

Key Information:

Vendor

Qualcomm
Status
Snapdragon
Vendor
CVE Published:
6 August 2025

What is CVE-2025-27069?

A vulnerability exists in Qualcomm products that can lead to memory corruption when processing DDI (Device Driver Interface) command calls. This flaw can potentially allow an attacker to disrupt the normal operation of the affected device, thereby compromising its functionality. It is essential for users and developers utilizing Qualcomm technology to be aware of this issue and to apply any recommended patches or updates provided by the vendor to mitigate risks associated with this vulnerability.

Affected Version(s)

Snapdragon Snapdragon Compute FastConnect 6900

Snapdragon Snapdragon Compute FastConnect 7800

Snapdragon Snapdragon Compute SC8380XP

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-27069 : Memory Corruption in Qualcomm Products via DDI Command Calls