Buffer Over-read in Video_CVE-2025-27033

6.1 / 10

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Description

Information disclosure while running video usecase having rogue firmware.

Basic Information

ID CVE-2025-27033

Source qualcomm

Published Sep 24, 2025 at 15:33

Affected Product

Vendor Qualcomm, Inc.

Product Snapdragon

Version QCM5430

Affected Versions Qualcomm, Inc. Snapdragon QCM5430
Qualcomm, Inc. Snapdragon QCM6490
Qualcomm, Inc. Snapdragon QCS5430
Qualcomm, Inc. Snapdragon QCS6490
Qualcomm, Inc. Snapdragon QCM8550
Qualcomm, Inc. Snapdragon QCS8550
Qualcomm, Inc. Snapdragon QCS615
Qualcomm, Inc. Snapdragon QCS9100
Qualcomm, Inc. Snapdragon SM6650
Qualcomm, Inc. Snapdragon SM7635
Qualcomm, Inc. Snapdragon SM8650
Qualcomm, Inc. Snapdragon SM8650P
Qualcomm, Inc. Snapdragon SM8650Q
Qualcomm, Inc. Snapdragon SM7675
Qualcomm, Inc. Snapdragon SM7675P
Qualcomm, Inc. Snapdragon SM8635
Qualcomm, Inc. Snapdragon SM8635P
Qualcomm, Inc. Snapdragon SM8750
Qualcomm, Inc. Snapdragon SM8750P
Qualcomm, Inc. Snapdragon SXR2330P
Qualcomm, Inc. Snapdragon WCN6750
Qualcomm, Inc. Snapdragon WCN6856
Qualcomm, Inc. Snapdragon QCN9274
Qualcomm, Inc. Snapdragon WCN7851
Qualcomm, Inc. Snapdragon QCA6698AQ
Qualcomm, Inc. Snapdragon WCN6650
Qualcomm, Inc. Snapdragon WCN6755
Qualcomm, Inc. Snapdragon WCN7850
Qualcomm, Inc. Snapdragon WCN7880
Qualcomm, Inc. Snapdragon WCN7860
Qualcomm, Inc. Snapdragon WCN7861
Qualcomm, Inc. Snapdragon WCN7881

CWE Classification

CWE-126

References

docs.qualcomm.com /product/publicresources/securitybulletin/september-2025-bulletin.html

{
    "lastseen": "",
    "description": "Information disclosure while running video usecase having rogue firmware.",
    "published": "2025-09-24T15:33:39.804Z",
    "modified": "2025-09-24T15:33:39.804Z",
    "type": "cve",
    "title": "Buffer Over-read in Video",
    "source": "qualcomm",
    "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html",
    "id": "CVE-2025-27033",
    "bulletinFamily": "",
    "cwe": [
        "CWE-126"
    ],
    "cvelist": null,
    "sourceData": "Qualcomm, Inc. Snapdragon QCM5430\nQualcomm, Inc. Snapdragon QCM6490\nQualcomm, Inc. Snapdragon QCS5430\nQualcomm, Inc. Snapdragon QCS6490\nQualcomm, Inc. Snapdragon QCM8550\nQualcomm, Inc. Snapdragon QCS8550\nQualcomm, Inc. Snapdragon QCS615\nQualcomm, Inc. Snapdragon QCS9100\nQualcomm, Inc. Snapdragon SM6650\nQualcomm, Inc. Snapdragon SM7635\nQualcomm, Inc. Snapdragon SM8650\nQualcomm, Inc. Snapdragon SM8650P\nQualcomm, Inc. Snapdragon SM8650Q\nQualcomm, Inc. Snapdragon SM7675\nQualcomm, Inc. Snapdragon SM7675P\nQualcomm, Inc. Snapdragon SM8635\nQualcomm, Inc. Snapdragon SM8635P\nQualcomm, Inc. Snapdragon SM8750\nQualcomm, Inc. Snapdragon SM8750P\nQualcomm, Inc. Snapdragon SXR2330P\nQualcomm, Inc. Snapdragon WCN6750\nQualcomm, Inc. Snapdragon WCN6856\nQualcomm, Inc. Snapdragon QCN9274\nQualcomm, Inc. Snapdragon WCN7851\nQualcomm, Inc. Snapdragon QCA6698AQ\nQualcomm, Inc. Snapdragon WCN6650\nQualcomm, Inc. Snapdragon WCN6755\nQualcomm, Inc. Snapdragon WCN7850\nQualcomm, Inc. Snapdragon WCN7880\nQualcomm, Inc. Snapdragon WCN7860\nQualcomm, Inc. Snapdragon WCN7861\nQualcomm, Inc. Snapdragon WCN7881",
    "sourceHref": "",
    "cvss": {
        "score": 6.1,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Snapdragon",
    "version": "QCM5430",
    "vendor": "Qualcomm, Inc.",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}