CVE-2025-27033

Buffer Over-read in Video

State: Published
Severity: 6.1 Medium
Published: Sep 24, 2025
Updated: Sep 25, 2025
Reserved: Feb 18, 2025

Description

Information disclosure while running video usecase having rogue firmware.

Scores

CVSS	Score	Vector	Source
3.1	6.1 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L	qualcomm

Weaknesses

CWE-126 Buffer Over-read

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	QCM5430Affected QCM6490Affected QCS5430Affected QCS6490Affected QCM8550Affected QCS8550Affected QCS615Affected QCS9100Affected SM6650Affected SM7635Affected SM8650Affected SM8650PAffected SM8650QAffected SM7675Affected SM7675PAffected SM8635Affected SM8635PAffected SM8750Affected SM8750PAffected SXR2330PAffected WCN6750Affected WCN6856Affected QCN9274Affected WCN7851Affected QCA6698AQAffected and 7 more versions

Product

Versions

SnapdragonQualcomm, Inc.

QCM5430Affected
QCM6490Affected
QCS5430Affected
QCS6490Affected
QCM8550Affected
QCS8550Affected
QCS615Affected
QCS9100Affected
SM6650Affected
SM7635Affected
SM8650Affected
SM8650PAffected
SM8650QAffected
SM7675Affected
SM7675PAffected
SM8635Affected
SM8635PAffected
SM8750Affected
SM8750PAffected
SXR2330PAffected
WCN6750Affected
WCN6856Affected
QCN9274Affected
WCN7851Affected
QCA6698AQAffected
and 7 more versions

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.