CVE-2025-27031

memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed.

Score

CVSS 3.1 7.8 High

Status

Analyzed - product-security@qualcomm.com

Published

2025-06-03

Last modified

2025-06-03

Weaknesses

CWE-416

Affected products

• Fastconnect 6700 Firmware (Qualcomm)
• Fastconnect 6900 Firmware (Qualcomm)
• Fastconnect 7800 Firmware (Qualcomm)
• Qcm5430 Firmware (Qualcomm)
• Qcm6490 Firmware (Qualcomm)
• Qcs5430 Firmware (Qualcomm)
• Qcs6490 Firmware (Qualcomm)
• Sc8380xp Firmware (Qualcomm)
• Snapdragon 7c+ Gen 3 Compute Firmware (Qualcomm)
• Snapdragon 8cx Gen 3 Compute Platform (sc8280xp-ab) Firmware (Qualcomm)
• Snapdragon 8cx Gen 3 Compute Platform (sc8280xp-bb) Firmware (Qualcomm)
• Video Collaboration Vc3 Platform Firmware (Qualcomm)
• Wcd9370 Firmware (Qualcomm)
• Wcd9375 Firmware (Qualcomm)
• Wcd9380 Firmware (Qualcomm)
• Wcd9385 Firmware (Qualcomm)
• Wsa8830 Firmware (Qualcomm)
• Wsa8835 Firmware (Qualcomm)
• Wsa8840 Firmware (Qualcomm)
• Wsa8845 Firmware (Qualcomm)
• Wsa8845h Firmware (Qualcomm)
• Snapdragon (Qualcomm Inc.)

References

• https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html