7.8
CVE-2025-27047
- EPSS 0.09%
- Veröffentlicht 08.07.2025 12:49:10
- Zuletzt bearbeitet 11.08.2025 15:06:17
- Erkennungen
LoginUse After Free in Display
Memory corruption while processing the TESTPATTERNCONFIG escape path.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Fastconnect 6700 Firmware Version -
Qualcomm ≫ Fastconnect 6900 Firmware Version -
Qualcomm ≫ Fastconnect 7800 Firmware Version -
Qualcomm ≫ Qcm5430 Firmware Version -
Qualcomm ≫ Qcm6490 Firmware Version -
Qualcomm ≫ Qcs5430 Firmware Version -
Qualcomm ≫ Qcs6490 Firmware Version -
Qualcomm ≫ Video Collaboration Vc3 Platform Firmware Version -
Qualcomm ≫ Sc8380xp Firmware Version -
Qualcomm ≫ Sc8280xp-abbb Firmware Version -
Qualcomm ≫ Wcd9370 Firmware Version -
Qualcomm ≫ Wcd9375 Firmware Version -
Qualcomm ≫ Wcd9380 Firmware Version -
Qualcomm ≫ Wcd9385 Firmware Version -
Qualcomm ≫ Wsa8830 Firmware Version -
Qualcomm ≫ Wsa8835 Firmware Version -
Qualcomm ≫ Wsa8840 Firmware Version -
Qualcomm ≫ Wsa8845 Firmware Version -
Qualcomm ≫ Wsa8845h Firmware Version -
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.09% | 0.005 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| Qualcomm | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-416 Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html