by Kastro
Paper/Archive/CVE-2025-27071

CVE-2025-27071

Qualcomm, Inc. Snapdragon — Buffer Copy Without Checking Size of Input in Powerline Communication Firmware

EPSS 0.2%CVSS 9.8
critical.is priorityof 100
31
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 9.5.095 × 201.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Memory corruption while processing specific files in Powerline Communication Firmware.

Affected

ProductAffectedFixed inSource
SnapdragonFastConnect 6800–CNA
SnapdragonFastConnect 6900–CNA
SnapdragonFastConnect 7800–CNA
SnapdragonQCA6391–CNA
SnapdragonQCA6426–CNA
SnapdragonQCA6436–CNA
SnapdragonQSM8250–CNA
SnapdragonSD865 5G–CNA
SnapdragonSDM429W–CNA
SnapdragonSDX55–CNA
SnapdragonSnapdragon 429 Mobile Platform–CNA
SnapdragonSnapdragon 8 Gen 1 Mobile Platform–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
qualcomm (CNA)7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refdocs.qualcomm.com/product/publicresources/securitybulletin/august-2025-bulletin.html