CVE-2025-27037

🗓️ 24 Sep 2025 15:33:43Reported by qualcommType

CVE-2025-27037 use after free in camera driver during config_dev IOCTL when CPU buffers are dropped.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-27037	24 Sep 202515:52	–	circl
CNNVD	Qualcomm Chipsets 资源管理错误漏洞	24 Sep 202500:00	–	cnnvd
Cvelist	CVE-2025-27037 Use After Free in Camera Driver	24 Sep 202515:33	–	cvelist
EUVD	EUVD-2025-30992	3 Oct 202520:07	–	euvd
NVD	CVE-2025-27037	24 Sep 202516:15	–	nvd
Positive Technologies	PT-2025-39275	24 Sep 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-27037	25 Sep 202515:48	–	redhatcve
Vulnrichment	CVE-2025-27037 Use After Free in Camera Driver	24 Sep 202515:33	–	vulnrichment

NVD

Node

qualcomm fastconnect_6800_firmwareMatch-

AND

qualcomm fastconnect_6800Match-

Node

qualcomm fastconnect_6900_firmwareMatch-

AND

qualcomm fastconnect_6900Match-

Node

qualcomm fastconnect_7800_firmwareMatch-

AND

qualcomm fastconnect_7800Match-

Node

qualcomm qam8295p_firmwareMatch-

AND

qualcomm qam8295pMatch-

Node

qualcomm qca6391_firmwareMatch-

AND

qualcomm qca6391Match-

Node

qualcomm qca6426_firmwareMatch-

AND

qualcomm qca6426Match-

Node

qualcomm qca6436_firmwareMatch-

AND

qualcomm qca6436Match-

Node

qualcomm qca6574au_firmwareMatch-

AND

qualcomm qca6574auMatch-

Node

qualcomm qca6696_firmwareMatch-

AND

qualcomm qca6696Match-

Node

qualcomm qcn9074_firmwareMatch-

AND

qualcomm qcn9074Match-

Node

qualcomm sa6145p_firmwareMatch-

AND

qualcomm sa6145pMatch-

Node

qualcomm sa6150p_firmwareMatch-

AND

qualcomm sa6150pMatch-

Node

qualcomm sa6155p_firmwareMatch-

AND

qualcomm sa6155pMatch-

Node

qualcomm sa8145p_firmwareMatch-

AND

qualcomm sa8145pMatch-

Node

qualcomm sa8150p_firmwareMatch-

AND

qualcomm sa8150pMatch-

Node

qualcomm sa8155p_firmwareMatch-

AND

qualcomm sa8155pMatch-

Node

qualcomm sa8195p_firmwareMatch-

AND

qualcomm sa8195pMatch-

Node

qualcomm sa8295p_firmwareMatch-

AND

qualcomm sa8295pMatch-

Node

qualcomm sd865_5g_firmwareMatch-

AND

qualcomm sd865_5gMatch-

Node

qualcomm snapdragon_8_gen_1_mobile_platform_firmwareMatch-

AND

qualcomm snapdragon_8_gen_1_mobile_platformMatch-

Node

qualcomm snapdragon_865_5g_mobile_platform_firmwareMatch-

AND

qualcomm snapdragon_865_5g_mobile_platformMatch-

Node

qualcomm snapdragon_865+_5g_mobile_platform_(sm8250-ab)_firmwareMatch-

AND

qualcomm snapdragon_865+_5g_mobile_platform_(sm8250-ab)Match-

Node

qualcomm snapdragon_870_5g_mobile_platform_(sm8250-ac)_firmwareMatch-

AND

qualcomm snapdragon_870_5g_mobile_platform_(sm8250-ac)Match-

Node

qualcomm snapdragon_x55_5g_modem-rf_system_firmwareMatch-

AND

qualcomm snapdragon_x55_5g_modem-rf_systemMatch-

Node

qualcomm snapdragon_xr2_5g_platform_firmwareMatch-

AND

qualcomm snapdragon_xr2_5g_platformMatch-

Node

qualcomm sw5100_firmwareMatch-

AND

qualcomm sw5100Match-

Node

qualcomm sw5100p_firmwareMatch-

AND

qualcomm sw5100pMatch-

Node

qualcomm sxr2130_firmwareMatch-

AND

qualcomm sxr2130Match-

Node

qualcomm wcd9380_firmwareMatch-

AND

qualcomm wcd9380Match-

Node

qualcomm wcn3660b_firmwareMatch-

AND

qualcomm wcn3660bMatch-

Node

qualcomm wcn3680b_firmwareMatch-

AND

qualcomm wcn3680bMatch-

Node

qualcomm wcn3980_firmwareMatch-

AND

qualcomm wcn3980Match-

Node

qualcomm wcn3988_firmwareMatch-

AND

qualcomm wcn3988Match-

Node

qualcomm wsa8810_firmwareMatch-

AND

qualcomm wsa8810Match-

Node

qualcomm wsa8815_firmwareMatch-

AND

qualcomm wsa8815Match-

Node

qualcomm wsa8830_firmwareMatch-

AND

qualcomm wsa8830Match-

Node

qualcomm wsa8835_firmwareMatch-

AND

qualcomm wsa8835Match-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Auto",
      "Snapdragon Compute",
      "Snapdragon Industrial IOT",
      "Snapdragon Mobile",
      "Snapdragon Wearables"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "FastConnect 6800"
      },
      {
        "status": "affected",
        "version": "FastConnect 6900"
      },
      {
        "status": "affected",
        "version": "FastConnect 7800"
      },
      {
        "status": "affected",
        "version": "QAM8295P"
      },
      {
        "status": "affected",
        "version": "QCA6391"
      },
      {
        "status": "affected",
        "version": "QCA6426"
      },
      {
        "status": "affected",
        "version": "QCA6436"
      },
      {
        "status": "affected",
        "version": "QCA6574AU"
      },
      {
        "status": "affected",
        "version": "QCA6696"
      },
      {
        "status": "affected",
        "version": "QCN9074"
      },
      {
        "status": "affected",
        "version": "SA6145P"
      },
      {
        "status": "affected",
        "version": "SA6150P"
      },
      {
        "status": "affected",
        "version": "SA6155P"
      },
      {
        "status": "affected",
        "version": "SA8145P"
      },
      {
        "status": "affected",
        "version": "SA8150P"
      },
      {
        "status": "affected",
        "version": "SA8155P"
      },
      {
        "status": "affected",
        "version": "SA8195P"
      },
      {
        "status": "affected",
        "version": "SA8295P"
      },
      {
        "status": "affected",
        "version": "SD865 5G"
      },
      {
        "status": "affected",
        "version": "Snapdragon 8 Gen 1 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 865 5G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 870 5G Mobile Platform (SM8250-AC)"
      },
      {
        "status": "affected",
        "version": "Snapdragon X55 5G Modem-RF System"
      },
      {
        "status": "affected",
        "version": "Snapdragon XR2 5G Platform"
      },
      {
        "status": "affected",
        "version": "SW5100"
      },
      {
        "status": "affected",
        "version": "SW5100P"
      },
      {
        "status": "affected",
        "version": "SXR2130"
      },
      {
        "status": "affected",
        "version": "WCD9380"
      },
      {
        "status": "affected",
        "version": "WCN3660B"
      },
      {
        "status": "affected",
        "version": "WCN3680B"
      },
      {
        "status": "affected",
        "version": "WCN3980"
      },
      {
        "status": "affected",
        "version": "WCN3988"
      },
      {
        "status": "affected",
        "version": "WSA8810"
      },
      {
        "status": "affected",
        "version": "WSA8815"
      },
      {
        "status": "affected",
        "version": "WSA8830"
      },
      {
        "status": "affected",
        "version": "WSA8835"
      }
    ]
  }
]

Source	Link
docs	www.docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html

25 Sep 2025 16:07Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.17.8

EPSS0.00019

SSVC

CWE-416