CVE Feed

    Dashboard / CVE / CVE-2025-27033

    CVE-2025-27033

    Information disclosure while running video usecase having rogue firmware.

    Published:Sep 24, 2025
    Last Modified:Sep 25, 2025
    EPS:Sep 24, 2025
    EPSS Score:0.00013
    CVSS Score:6.1

    Affected Products

    Vendor
    Qualcomm
    Product
    Qca6698aq
    Vendor
    Qualcomm
    Product
    Qca6698aq Firmware
    Vendor
    Qualcomm
    Product
    Qcm5430
    Vendor
    Qualcomm
    Product
    Qcm5430 Firmware
    Vendor
    Qualcomm
    Product
    Qcm6490
    Vendor
    Qualcomm
    Product
    Qcm6490 Firmware
    Vendor
    Qualcomm
    Product
    Qcm8550
    Vendor
    Qualcomm
    Product
    Qcm8550 Firmware
    Vendor
    Qualcomm
    Product
    Qcn9274
    Vendor
    Qualcomm
    Product
    Qcn9274 Firmware
    Vendor
    Qualcomm
    Product
    Qcs5430
    Vendor
    Qualcomm
    Product
    Qcs5430 Firmware
    Vendor
    Qualcomm
    Product
    Qcs615
    Vendor
    Qualcomm
    Product
    Qcs615 Firmware
    Vendor
    Qualcomm
    Product
    Qcs6490
    Vendor
    Qualcomm
    Product
    Qcs6490 Firmware
    Vendor
    Qualcomm
    Product
    Qcs8550
    Vendor
    Qualcomm
    Product
    Qcs8550 Firmware
    Vendor
    Qualcomm
    Product
    Qcs9100
    Vendor
    Qualcomm
    Product
    Qcs9100 Firmware
    Vendor
    Qualcomm
    Product
    Sm6650
    Vendor
    Qualcomm
    Product
    Sm6650 Firmware
    Vendor
    Qualcomm
    Product
    Sm7635
    Vendor
    Qualcomm
    Product
    Sm7635 Firmware
    Vendor
    Qualcomm
    Product
    Sm7675
    Vendor
    Qualcomm
    Product
    Sm7675 Firmware
    Vendor
    Qualcomm
    Product
    Sm7675p
    Vendor
    Qualcomm
    Product
    Sm7675p Firmware
    Vendor
    Qualcomm
    Product
    Sm8635
    Vendor
    Qualcomm
    Product
    Sm8635 Firmware
    Vendor
    Qualcomm
    Product
    Sm8635p
    Vendor
    Qualcomm
    Product
    Sm8635p Firmware
    Vendor
    Qualcomm
    Product
    Sm8650
    Vendor
    Qualcomm
    Product
    Sm8650 Firmware
    Vendor
    Qualcomm
    Product
    Sm8650p
    Vendor
    Qualcomm
    Product
    Sm8650p Firmware
    Vendor
    Qualcomm
    Product
    Sm8650q
    Vendor
    Qualcomm
    Product
    Sm8650q Firmware
    Vendor
    Qualcomm
    Product
    Sm8750
    Vendor
    Qualcomm
    Product
    Sm8750 Firmware
    Vendor
    Qualcomm
    Product
    Sm8750p
    Vendor
    Qualcomm
    Product
    Sm8750p Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon
    Vendor
    Qualcomm
    Product
    Sxr2330p
    Vendor
    Qualcomm
    Product
    Sxr2330p Firmware
    Vendor
    Qualcomm
    Product
    Wcn6650
    Vendor
    Qualcomm
    Product
    Wcn6650 Firmware
    Vendor
    Qualcomm
    Product
    Wcn6750
    Vendor
    Qualcomm
    Product
    Wcn6750 Firmware
    Vendor
    Qualcomm
    Product
    Wcn6755
    Vendor
    Qualcomm
    Product
    Wcn6755 Firmware
    Vendor
    Qualcomm
    Product
    Wcn6856
    Vendor
    Qualcomm
    Product
    Wcn6856 Firmware
    Vendor
    Qualcomm
    Product
    Wcn7850
    Vendor
    Qualcomm
    Product
    Wcn7850 Firmware
    Vendor
    Qualcomm
    Product
    Wcn7851
    Vendor
    Qualcomm
    Product
    Wcn7851 Firmware
    Vendor
    Qualcomm
    Product
    Wcn7860
    Vendor
    Qualcomm
    Product
    Wcn7860 Firmware
    Vendor
    Qualcomm
    Product
    Wcn7861
    Vendor
    Qualcomm
    Product
    Wcn7861 Firmware
    Vendor
    Qualcomm
    Product
    Wcn7880
    Vendor
    Qualcomm
    Product
    Wcn7880 Firmware
    Vendor
    Qualcomm
    Product
    Wcn7881
    Vendor
    Qualcomm
    Product
    Wcn7881 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-126 Buffer Over-read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-24092 (CVSS 7.2) — Memory Corruption when processing fastboot commands to set display mode.…
    CVE-2026-24091 (CVSS 7.2) — Memory corruption while processing fastboot commands with improperly formatted input.…
    CVE-2026-24090 (CVSS 7.1) — Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.…
    CVE-2026-24089 (CVSS 7.2) — Memory corruption while processing fastboot commands with invalid input.…
    CVE-2026-24088 (CVSS 8.2) — Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a cus…
    CVE-2026-24087 (CVSS 7.2) — Memory corruption while processing fastboot OEM commands.…
    CVE-2026-24085 (CVSS 7.2) — Memory Corruption when processing display command line information due to improper initialization of a variabl…
    CVE-2025-59610 (CVSS 6.4) — Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification o…
    CVE-2025-59609 (CVSS 5.5) — Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient len…
    CVE-2025-59606 (CVSS 7.8) — Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High