CVE-2025-27030 — Buffer Over-read in Audio

Description (CNA)

information disclosure while invoking calibration data from user space to update firmware size.

Affected (CNA)

Vendor / product	Versions
Qualcomm, Inc. / Snapdragon	affected C-V2X 9150; affected QAM8295P; affected QCA6574AU; affected QCA6584AU; affected QCA6696; affected QCA6698AQ; affected QCA9367; affected QCA9377; affected QCN9074; affected QCS410; affected QCS610; affected QSM8250; affected Qualcomm Video Collaboration VC1 Platform; affected Qualcomm Video Collaboration VC3 Platform; affected SA6145P; affected SA6150P; affected SA6155P; affected SA8145P; affected SA8150P; affected SA8155P; affected SA8195P; affected SA8295P; affected SA8530P; affected SA8540P; affected SA9000P; affected SDX55; affected Snapdragon Auto 5G Modem-RF; affected Snapdragon Auto 5G Modem-RF Gen 2; affected SW5100; affected SW5100P; affected WCD9341; affected WCD9370; affected WCN3660B; affected WCN3680B; affected WCN3950; affected WCN3980; affected WCN3988; affected WSA8810; affected WSA8815; affected WSA8830; affected WSA8835

Vendor / product

Versions

Qualcomm, Inc. / Snapdragon

affected C-V2X 9150; affected QAM8295P; affected QCA6574AU; affected QCA6584AU; affected QCA6696; affected QCA6698AQ; affected QCA9367; affected QCA9377; affected QCN9074; affected QCS410; affected QCS610; affected QSM8250; affected Qualcomm Video Collaboration VC1 Platform; affected Qualcomm Video Collaboration VC3 Platform; affected SA6145P; affected SA6150P; affected SA6155P; affected SA8145P; affected SA8150P; affected SA8155P; affected SA8195P; affected SA8295P; affected SA8530P; affected SA8540P; affected SA9000P; affected SDX55; affected Snapdragon Auto 5G Modem-RF; affected Snapdragon Auto 5G Modem-RF Gen 2; affected SW5100; affected SW5100P; affected WCD9341; affected WCD9370; affected WCN3660B; affected WCN3680B; affected WCN3950; affected WCN3980; affected WCN3988; affected WSA8810; affected WSA8815; affected WSA8830; affected WSA8835

CWE

CWE-126

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.