CVE-2025-27075
HIGHDescription
Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host.
Is your site exposed to CVE-2025-27075?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| qualcomm | aqt1000_firmware |
| qualcomm | aqt1000 |
| qualcomm | fastconnect_6200_firmware |
| qualcomm | fastconnect_6200 |
| qualcomm | fastconnect_6700_firmware |
| qualcomm | fastconnect_6700 |
| qualcomm | fastconnect_6800_firmware |
| qualcomm | fastconnect_6800 |
| qualcomm | fastconnect_6900_firmware |
| qualcomm | fastconnect_6900 |
| qualcomm | fastconnect_7800_firmware |
| qualcomm | fastconnect_7800 |
| qualcomm | qca6391_firmware |
| qualcomm | qca6391 |
| qualcomm | qca6420_firmware |
| qualcomm | qca6420 |
| qualcomm | qca6430_firmware |
| qualcomm | qca6430 |
| qualcomm | qcm5430_firmware |
| qualcomm | qcm5430 |
| qualcomm | qcm6490_firmware |
| qualcomm | qcm6490 |
| qualcomm | qcs5430_firmware |
| qualcomm | qcs5430 |
| qualcomm | qcs6490_firmware |
| qualcomm | qcs6490 |
| qualcomm | video_collaboration_vc3_platform_firmware |
| qualcomm | video_collaboration_vc3_platform |
| qualcomm | sc8380xp_firmware |
| qualcomm | sc8380xp |
| qualcomm | snapdragon_7c\+_gen_3_compute_firmware |
| qualcomm | snapdragon_7c\+_gen_3_compute |
| qualcomm | snapdragon_8c_compute_platform_\(sc8180x-ad\)_firmware |
| qualcomm | snapdragon_8c_compute_platform_\(sc8180x-ad\) |
| qualcomm | snapdragon_8cx_compute_platform_\(sc8180x-aa\)_firmware |
| qualcomm | snapdragon_8cx_compute_platform_\(sc8180x-aa\) |
| qualcomm | snapdragon_8cx_compute_platform_\(sc8180x-ab\)_firmware |
| qualcomm | snapdragon_8cx_compute_platform_\(sc8180x-ab\) |
| qualcomm | snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-ac\)_firmware |
| qualcomm | snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-ac\) |
| qualcomm | snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-af\)_firmware |
| qualcomm | snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-af\) |
| qualcomm | snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\)_firmware |
| qualcomm | snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\) |
| qualcomm | snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\)_firmware |
| qualcomm | snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\) |
| qualcomm | wcd9340_firmware |
| qualcomm | wcd9340 |
| qualcomm | wcd9341_firmware |
| qualcomm | wcd9341 |
| qualcomm | wcd9370_firmware |
| qualcomm | wcd9370 |
| qualcomm | wcd9375_firmware |
| qualcomm | wcd9375 |
| qualcomm | wcd9380_firmware |
| qualcomm | wcd9380 |
| qualcomm | wcd9385_firmware |
| qualcomm | wcd9385 |
| qualcomm | wsa8810_firmware |
| qualcomm | wsa8810 |
| qualcomm | wsa8815_firmware |
| qualcomm | wsa8815 |
| qualcomm | wsa8830_firmware |
| qualcomm | wsa8830 |
| qualcomm | wsa8835_firmware |
| qualcomm | wsa8835 |
| qualcomm | wsa8840_firmware |
| qualcomm | wsa8840 |
| qualcomm | wsa8845_firmware |
| qualcomm | wsa8845 |
| qualcomm | wsa8845h_firmware |
| qualcomm | wsa8845h |
References
Frequently Asked Questions
What is CVE-2025-27075? +
How severe is CVE-2025-27075? +
What products are affected by CVE-2025-27075? +
How do I check if I'm vulnerable to CVE-2025-27075? +
Related Vulnerabilities
A weakness in Automated Logic and Carrier i-Vu Gen5 router on driver version drv_gen5_106-01-2380, allows malformed packets to be sent …
Taiko Alethia is an Ethereum-equivalent, permissionless, based rollup designed to scale Ethereum without compromising its fundamental properties. In 2.3.1 and …
Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting …
Memory corruption while parsing the ML IE due to invalid frame content.
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. Arrays can be keyed by a signed integer, …
FFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability in libavcodec/cbs_h266_syntax_template.c. This vulnerability allows attackers …