CVE Feed

    Dashboard / CVE / CVE-2025-27060

    CVE-2025-27060

    Memory corruption while performing SCM call with malformed inputs.

    Published:Oct 9, 2025
    Last Modified:Feb 26, 2026
    EPS:Oct 9, 2025
    EPSS Score:0.00022
    CVSS Score:8.8

    Affected Products

    Vendor
    Qualcomm
    Product
    Immersive Home 214 Platform
    Vendor
    Qualcomm
    Product
    Immersive Home 214 Platform Firmware
    Vendor
    Qualcomm
    Product
    Immersive Home 216 Platform
    Vendor
    Qualcomm
    Product
    Immersive Home 216 Platform Firmware
    Vendor
    Qualcomm
    Product
    Immersive Home 316 Platform
    Vendor
    Qualcomm
    Product
    Immersive Home 316 Platform Firmware
    Vendor
    Qualcomm
    Product
    Immersive Home 318 Platform
    Vendor
    Qualcomm
    Product
    Immersive Home 318 Platform Firmware
    Vendor
    Qualcomm
    Product
    Ipq5010
    Vendor
    Qualcomm
    Product
    Ipq5010 Firmware
    Vendor
    Qualcomm
    Product
    Ipq5028
    Vendor
    Qualcomm
    Product
    Ipq5028 Firmware
    Vendor
    Qualcomm
    Product
    Qcn6023
    Vendor
    Qualcomm
    Product
    Qcn6023 Firmware
    Vendor
    Qualcomm
    Product
    Qcn6024
    Vendor
    Qualcomm
    Product
    Qcn6024 Firmware
    Vendor
    Qualcomm
    Product
    Qcn6100
    Vendor
    Qualcomm
    Product
    Qcn6100 Firmware
    Vendor
    Qualcomm
    Product
    Qcn6102
    Vendor
    Qualcomm
    Product
    Qcn6102 Firmware
    Vendor
    Qualcomm
    Product
    Qcn6112
    Vendor
    Qualcomm
    Product
    Qcn6112 Firmware
    Vendor
    Qualcomm
    Product
    Qcn6122
    Vendor
    Qualcomm
    Product
    Qcn6122 Firmware
    Vendor
    Qualcomm
    Product
    Qcn6132
    Vendor
    Qualcomm
    Product
    Qcn6132 Firmware
    Vendor
    Qualcomm
    Product
    Qcn9000
    Vendor
    Qualcomm
    Product
    Qcn9000 Firmware
    Vendor
    Qualcomm
    Product
    Qcn9001
    Vendor
    Qualcomm
    Product
    Qcn9001 Firmware
    Vendor
    Qualcomm
    Product
    Qcn9002
    Vendor
    Qualcomm
    Product
    Qcn9002 Firmware
    Vendor
    Qualcomm
    Product
    Qcn9003
    Vendor
    Qualcomm
    Product
    Qcn9003 Firmware
    Vendor
    Qualcomm
    Product
    Qcn9012
    Vendor
    Qualcomm
    Product
    Qcn9012 Firmware
    Vendor
    Qualcomm
    Product
    Qcn9022
    Vendor
    Qualcomm
    Product
    Qcn9022 Firmware
    Vendor
    Qualcomm
    Product
    Qcn9024
    Vendor
    Qualcomm
    Product
    Qcn9024 Firmware
    Vendor
    Qualcomm
    Product
    Qcn9070
    Vendor
    Qualcomm
    Product
    Qcn9070 Firmware
    Vendor
    Qualcomm
    Product
    Qcn9072
    Vendor
    Qualcomm
    Product
    Qcn9072 Firmware
    Vendor
    Qualcomm
    Product
    Qcn9074
    Vendor
    Qualcomm
    Product
    Qcn9074 Firmware
    Vendor
    Qualcomm
    Product
    Qcn9100
    Vendor
    Qualcomm
    Product
    Qcn9100 Firmware
    Vendor
    Qualcomm
    Product
    Qcn9274
    Vendor
    Qualcomm
    Product
    Qcn9274 Firmware
    Vendor
    Qualcomm
    Product
    Snapdragon

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-822 Untrusted Pointer Dereference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-129 Pointer Manipulation

    Related CVEs

    CVE-2026-24088 (CVSS 8.2) — Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a cus…
    CVE-2025-59609 (CVSS 5.5) — Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient len…
    CVE-2026-21367 (CVSS 7.6) — Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial …
    CVE-2025-47339 (CVSS 7.8) — Memory corruption while deinitializing a HDCP session.…
    CVE-2025-47331 (CVSS 6.1) — Information disclosure while processing a firmware event.…
    CVE-2025-27074 (CVSS 8.8) — Memory corruption while processing a GP command response.…
    CVE-2025-27059 (CVSS 8.8) — Memory corruption while performing SCM call.…
    CVE-2025-27040 (CVSS 6.5) — Information disclosure may occur while processing the hypervisor log.…
    CVE-2025-47326 (CVSS 7.5) — Transient DOS while handling command data during power control processing.…
    CVE-2025-47318 (CVSS 7.5) — Transient DOS while parsing the EPTM test control message to get the test pattern.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High