8.8

CVE-2025-27060

Untrusted Pointer Dereference in TZ Firmware

Memory corruption while performing SCM call with malformed inputs.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Ipq5010 Firmware Version -
   Qualcomm ≫ Ipq5010 Version -
Qualcomm ≫ Ipq5028 Firmware Version -
   Qualcomm ≫ Ipq5028 Version -
Qualcomm ≫ Qcn6023 Firmware Version -
   Qualcomm ≫ Qcn6023 Version -
Qualcomm ≫ Qcn6024 Firmware Version -
   Qualcomm ≫ Qcn6024 Version -
Qualcomm ≫ Qcn6100 Firmware Version -
   Qualcomm ≫ Qcn6100 Version -
Qualcomm ≫ Qcn6102 Firmware Version -
   Qualcomm ≫ Qcn6102 Version -
Qualcomm ≫ Qcn6112 Firmware Version -
   Qualcomm ≫ Qcn6112 Version -
Qualcomm ≫ Qcn6122 Firmware Version -
   Qualcomm ≫ Qcn6122 Version -
Qualcomm ≫ Qcn6132 Firmware Version -
   Qualcomm ≫ Qcn6132 Version -
Qualcomm ≫ Qcn9000 Firmware Version -
   Qualcomm ≫ Qcn9000 Version -
Qualcomm ≫ Qcn9001 Firmware Version -
   Qualcomm ≫ Qcn9001 Version -
Qualcomm ≫ Qcn9002 Firmware Version -
   Qualcomm ≫ Qcn9002 Version -
Qualcomm ≫ Qcn9003 Firmware Version -
   Qualcomm ≫ Qcn9003 Version -
Qualcomm ≫ Qcn9012 Firmware Version -
   Qualcomm ≫ Qcn9012 Version -
Qualcomm ≫ Qcn9022 Firmware Version -
   Qualcomm ≫ Qcn9022 Version -
Qualcomm ≫ Qcn9024 Firmware Version -
   Qualcomm ≫ Qcn9024 Version -
Qualcomm ≫ Qcn9070 Firmware Version -
   Qualcomm ≫ Qcn9070 Version -
Qualcomm ≫ Qcn9072 Firmware Version -
   Qualcomm ≫ Qcn9072 Version -
Qualcomm ≫ Qcn9074 Firmware Version -
   Qualcomm ≫ Qcn9074 Version -
Qualcomm ≫ Qcn9100 Firmware Version -
   Qualcomm ≫ Qcn9100 Version -
Qualcomm ≫ Qcn9274 Firmware Version -
   Qualcomm ≫ Qcn9274 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.08% 0.003
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Qualcomm 8.8 2 6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CWE-822 Untrusted Pointer Dereference

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
Vendor Advisory