CVE-2025-27068
HIGHDescription
Memory corruption while processing an IOCTL command with an arbitrary address.
Is your site exposed to CVE-2025-27068?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| qualcomm | fastconnect_6200_firmware |
| qualcomm | fastconnect_6200 |
| qualcomm | fastconnect_6900_firmware |
| qualcomm | fastconnect_6900 |
| qualcomm | fastconnect_7800_firmware |
| qualcomm | fastconnect_7800 |
| qualcomm | sc8380xp_firmware |
| qualcomm | sc8380xp |
| qualcomm | sm6250_firmware |
| qualcomm | sm6250 |
| qualcomm | snapdragon_7c_compute_platform_\(sc7180-ac\)_firmware |
| qualcomm | snapdragon_7c_compute_platform_\(sc7180-ac\) |
| qualcomm | snapdragon_7c_gen_2_compute_platform_\(sc7180-ad\)_\"rennell_pro\"_firmware |
| qualcomm | snapdragon_7c_gen_2_compute_platform_\(sc7180-ad\)_\"rennell_pro\" |
| qualcomm | snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\)_firmware |
| qualcomm | snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\) |
| qualcomm | wcd9380_firmware |
| qualcomm | wcd9380 |
| qualcomm | wcd9385_firmware |
| qualcomm | wcd9385 |
| qualcomm | wsa8830_firmware |
| qualcomm | wsa8830 |
| qualcomm | wsa8835_firmware |
| qualcomm | wsa8835 |
| qualcomm | wsa8840_firmware |
| qualcomm | wsa8840 |
| qualcomm | wsa8845_firmware |
| qualcomm | wsa8845 |
| qualcomm | wsa8845h_firmware |
| qualcomm | wsa8845h |
| qualcomm | snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\)_firmware |
| qualcomm | snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\) |
References
Frequently Asked Questions
What is CVE-2025-27068? +
How severe is CVE-2025-27068? +
What products are affected by CVE-2025-27068? +
How do I check if I'm vulnerable to CVE-2025-27068? +
Related Vulnerabilities
A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet …
iopress is a native HTTP server for Node.js with platform-specific async I/O. Prior to version 1.0.5, the chunked-transfer-encoding HTTP request …
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read past the end …
A buffer overread caused by an integer-overflow in Proc/SProcXResQueryClientIds in X.Org xwayland before 24.1.15 and X Server before 21.1.26 could …
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built with libultrahdr support …
A missing authentication vulnerability in the VPN configuration management has been identified in Archer MR600 (v2, v3 & v5) and …
