CVE-2025-27036

🗓️ 24 Sep 2025 15:33:42Reported by qualcommType

CVE-2025-27036: Video engine buffer overread causes information disclosure when escape input data is below minimum size.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-27036	24 Sep 202515:53	–	circl
CNNVD	Qualcomm Chipsets 安全漏洞	24 Sep 202500:00	–	cnnvd
Cvelist	CVE-2025-27036 Buffer Over-read in Video	24 Sep 202515:33	–	cvelist
EUVD	EUVD-2025-30993	3 Oct 202520:07	–	euvd
NVD	CVE-2025-27036	24 Sep 202516:15	–	nvd
Positive Technologies	PT-2025-39274	24 Sep 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-27036	25 Sep 202515:48	–	redhatcve
Vulnrichment	CVE-2025-27036 Buffer Over-read in Video	24 Sep 202515:33	–	vulnrichment

NVD

Node

qualcomm fastconnect_6700_firmwareMatch-

AND

qualcomm fastconnect_6700Match-

Node

qualcomm fastconnect_6900_firmwareMatch-

AND

qualcomm fastconnect_6900Match-

Node

qualcomm fastconnect_7800_firmwareMatch-

AND

qualcomm fastconnect_7800Match-

Node

qualcomm qcm5430_firmwareMatch-

AND

qualcomm qcm5430Match-

Node

qualcomm qcm6490_firmwareMatch-

AND

qualcomm qcm6490Match-

Node

qualcomm qcs5430_firmwareMatch-

AND

qualcomm qcs5430Match-

Node

qualcomm qcs6490_firmwareMatch-

AND

qualcomm qcs6490Match-

Node

qualcomm video_collaboration_vc3_platform_firmwareMatch-

AND

qualcomm video_collaboration_vc3_platformMatch-

Node

qualcomm sc8380xp_firmwareMatch-

AND

qualcomm sc8380xpMatch-

Node

qualcomm snapdragon_7c+_gen_3_compute_firmwareMatch-

AND

qualcomm snapdragon_7c+_gen_3_computeMatch-

Node

qualcomm snapdragon_8cx_gen_3_compute_platform_(sc8280xp-ab)_firmwareMatch-

AND

qualcomm snapdragon_8cx_gen_3_compute_platform_(sc8280xp-ab)Match-

Node

qualcomm snapdragon_8cx_gen_3_compute_platform_(sc8280xp-bb)_firmwareMatch-

AND

qualcomm snapdragon_8cx_gen_3_compute_platform_(sc8280xp-bb)Match-

Node

qualcomm wcd9370_firmwareMatch-

AND

qualcomm wcd9370Match-

Node

qualcomm wcd9375_firmwareMatch-

AND

qualcomm wcd9375Match-

Node

qualcomm wcd9380_firmwareMatch-

AND

qualcomm wcd9380Match-

Node

qualcomm wcd9385_firmwareMatch-

AND

qualcomm wcd9385Match-

Node

qualcomm wsa8830_firmwareMatch-

AND

qualcomm wsa8830Match-

Node

qualcomm wsa8835_firmwareMatch-

AND

qualcomm wsa8835Match-

Node

qualcomm wsa8840_firmwareMatch-

AND

qualcomm wsa8840Match-

Node

qualcomm wsa8845_firmwareMatch-

AND

qualcomm wsa8845Match-

Node

qualcomm wsa8845h_firmwareMatch-

AND

qualcomm wsa8845hMatch-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Compute",
      "Snapdragon Industrial IOT"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "FastConnect 6700"
      },
      {
        "status": "affected",
        "version": "FastConnect 6900"
      },
      {
        "status": "affected",
        "version": "FastConnect 7800"
      },
      {
        "status": "affected",
        "version": "QCM5430"
      },
      {
        "status": "affected",
        "version": "QCM6490"
      },
      {
        "status": "affected",
        "version": "QCS5430"
      },
      {
        "status": "affected",
        "version": "QCS6490"
      },
      {
        "status": "affected",
        "version": "Qualcomm Video Collaboration VC3 Platform"
      },
      {
        "status": "affected",
        "version": "SC8380XP"
      },
      {
        "status": "affected",
        "version": "Snapdragon 7c+ Gen 3 Compute"
      },
      {
        "status": "affected",
        "version": "Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB)"
      },
      {
        "status": "affected",
        "version": "WCD9370"
      },
      {
        "status": "affected",
        "version": "WCD9375"
      },
      {
        "status": "affected",
        "version": "WCD9380"
      },
      {
        "status": "affected",
        "version": "WCD9385"
      },
      {
        "status": "affected",
        "version": "WSA8830"
      },
      {
        "status": "affected",
        "version": "WSA8835"
      },
      {
        "status": "affected",
        "version": "WSA8840"
      },
      {
        "status": "affected",
        "version": "WSA8845"
      },
      {
        "status": "affected",
        "version": "WSA8845H"
      }
    ]
  }
]

Source	Link
docs	www.docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html

25 Sep 2025 16:08Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.1

EPSS0.00017

SSVC

CWE-126