CVE-2025-27074

Incorrect Calculation of Buffer Size in SCE-Mink

State: Published
Severity: 8.8 High
Published: Nov 4, 2025
Updated: Feb 26, 2026
Reserved: Feb 18, 2025

Description

Memory corruption while processing a GP command response.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	qualcomm

Weaknesses

CWE-131 Incorrect Calculation of Buffer Size

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	APQ8064AUAffected CSR8811Affected Immersive Home 214 PlatformAffected Immersive Home 216 PlatformAffected Immersive Home 316 PlatformAffected Immersive Home 318 PlatformAffected IPQ5010Affected IPQ5028Affected IPQ8070Affected IPQ8070AAffected IPQ8071Affected IPQ8071AAffected IPQ8072Affected IPQ8072AAffected IPQ8074Affected IPQ8074AAffected IPQ8076Affected IPQ8076AAffected IPQ8078Affected IPQ8078AAffected IPQ8173Affected IPQ8174Affected IPQ9008Affected IPQ9574Affected MDM9640Affected and 70 more versions

Product

Versions

SnapdragonQualcomm, Inc.

APQ8064AUAffected
CSR8811Affected
Immersive Home 214 PlatformAffected
Immersive Home 216 PlatformAffected
Immersive Home 316 PlatformAffected
Immersive Home 318 PlatformAffected
IPQ5010Affected
IPQ5028Affected
IPQ8070Affected
IPQ8070AAffected
IPQ8071Affected
IPQ8071AAffected
IPQ8072Affected
IPQ8072AAffected
IPQ8074Affected
IPQ8074AAffected
IPQ8076Affected
IPQ8076AAffected
IPQ8078Affected
IPQ8078AAffected
IPQ8173Affected
IPQ8174Affected
IPQ9008Affected
IPQ9574Affected
MDM9640Affected
and 70 more versions

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2025-bulletin.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.