by Kastro
Paper/Archive/CVE-2025-27034

CVE-2025-27034

Qualcomm, Inc. Snapdragon — Improper Validation of Array Index in Multi-Mode Call Processor

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 35.8.358 × 207.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Memory corruption while selecting the PLMN from SOR failed list.

Affected

ProductAffectedFixed inSource
Snapdragon315 5G IoT Modem–CNA
SnapdragonAR8035–CNA
SnapdragonFastConnect 6200–CNA
SnapdragonFastConnect 6700–CNA
SnapdragonFastConnect 6800–CNA
SnapdragonFastConnect 6900–CNA
SnapdragonFastConnect 7800–CNA
SnapdragonQCA6174A–CNA
SnapdragonQCA6391–CNA
SnapdragonQCA6574A–CNA
SnapdragonQCA6584AU–CNA
SnapdragonQCA6595AU–CNA

Scores by source

qualcomm (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refdocs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html