CVE-2025-27059

HIGH
Published Oct 9, 2025 Modified Oct 21, 2025 CWE-823

Description

Memory corruption while performing SCM call.

CVSS v3.1 Score

8.8
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness Type (CWE)

CWE-823 CWE-823

Affected Products

Vendor Product
qualcomm immersive_home_214_platform_firmware
qualcomm immersive_home_214_platform
qualcomm immersive_home_216_platform_firmware
qualcomm immersive_home_216_platform
qualcomm immersive_home_316_platform_firmware
qualcomm immersive_home_316_platform
qualcomm immersive_home_318_platform_firmware
qualcomm immersive_home_318_platform
qualcomm ipq5010_firmware
qualcomm ipq5010
qualcomm ipq5028_firmware
qualcomm ipq5028
qualcomm qcn6023_firmware
qualcomm qcn6023
qualcomm qcn6024_firmware
qualcomm qcn6024
qualcomm qcn6100_firmware
qualcomm qcn6100
qualcomm qcn6102_firmware
qualcomm qcn6102
qualcomm qcn6112_firmware
qualcomm qcn6112
qualcomm qcn6122_firmware
qualcomm qcn6122
qualcomm qcn6132_firmware
qualcomm qcn6132
qualcomm qcn9000_firmware
qualcomm qcn9000
qualcomm qcn9001_firmware
qualcomm qcn9001
qualcomm qcn9002_firmware
qualcomm qcn9002
qualcomm qcn9003_firmware
qualcomm qcn9003
qualcomm qcn9012_firmware
qualcomm qcn9012
qualcomm qcn9022_firmware
qualcomm qcn9022
qualcomm qcn9024_firmware
qualcomm qcn9024
qualcomm qcn9070_firmware
qualcomm qcn9070
qualcomm qcn9072_firmware
qualcomm qcn9072
qualcomm qcn9074_firmware
qualcomm qcn9074
qualcomm qcn9100_firmware
qualcomm qcn9100
qualcomm qcn9274_firmware
qualcomm qcn9274

References

Frequently Asked Questions

What is CVE-2025-27059? +
Memory corruption while performing SCM call. It has a CVSS v3.1 base score of 8.8 (HIGH).
How severe is CVE-2025-27059? +
CVE-2025-27059 has a CVSS v3.1 score of 8.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2025-27059? +
CVE-2025-27059 affects products from qualcomm, specifically: immersive_home_214_platform, immersive_home_214_platform_firmware, immersive_home_216_platform, immersive_home_216_platform_firmware, immersive_home_316_platform, immersive_home_316_platform_firmware, immersive_home_318_platform, immersive_home_318_platform_firmware, ipq5010, ipq5010_firmware, ipq5028, ipq5028_firmware, qcn6023, qcn6023_firmware, qcn6024, qcn6024_firmware, qcn6100, qcn6100_firmware, qcn6102, qcn6102_firmware, qcn6112, qcn6112_firmware, qcn6122, qcn6122_firmware, qcn6132, qcn6132_firmware, qcn9000, qcn9000_firmware, qcn9001, qcn9001_firmware, qcn9002, qcn9002_firmware, qcn9003, qcn9003_firmware, qcn9012, qcn9012_firmware, qcn9022, qcn9022_firmware, qcn9024, qcn9024_firmware, qcn9070, qcn9070_firmware, qcn9072, qcn9072_firmware, qcn9074, qcn9074_firmware, qcn9100, qcn9100_firmware, qcn9274, qcn9274_firmware. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2025-27059? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-46806

A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures.This issue affects sslh …
CVE-2017-20211

UCanCode E-XD++ Visualization Enterprise Suite contains an untrusted pointer dereference vulnerability via the TKDRAWCAD.TKDrawCADCtrl.1 ActiveX control. This is because it …
CVE-2017-11076 9.8

On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware …
CVE-2023-43553 9.8

Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE.
CVE-2024-42416 8.8

The ctl_report_supported_opcodes function did not sufficiently validate a field provided by userspace, allowing an arbitrary write to a limited amount …
CVE-2023-43534 8.6

Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point.

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2025-27059 — free, no signup required.

Start Free Scan