CVE-2025-27033 — Buffer Over-read in Video

Description (CNA)

Information disclosure while running video usecase having rogue firmware.

Affected (CNA)

Vendor / product	Versions
Qualcomm, Inc. / Snapdragon	affected QCM5430; affected QCM6490; affected QCS5430; affected QCS6490; affected QCM8550; affected QCS8550; affected QCS615; affected QCS9100; affected SM6650; affected SM7635; affected SM8650; affected SM8650P; affected SM8650Q; affected SM7675; affected SM7675P; affected SM8635; affected SM8635P; affected SM8750; affected SM8750P; affected SXR2330P; affected WCN6750; affected WCN6856; affected QCN9274; affected WCN7851; affected QCA6698AQ; affected WCN6650; affected WCN6755; affected WCN7850; affected WCN7880; affected WCN7860; affected WCN7861; affected WCN7881

Vendor / product

Versions

Qualcomm, Inc. / Snapdragon

affected QCM5430; affected QCM6490; affected QCS5430; affected QCS6490; affected QCM8550; affected QCS8550; affected QCS615; affected QCS9100; affected SM6650; affected SM7635; affected SM8650; affected SM8650P; affected SM8650Q; affected SM7675; affected SM7675P; affected SM8635; affected SM8635P; affected SM8750; affected SM8750P; affected SXR2330P; affected WCN6750; affected WCN6856; affected QCN9274; affected WCN7851; affected QCA6698AQ; affected WCN6650; affected WCN6755; affected WCN7850; affected WCN7880; affected WCN7860; affected WCN7861; affected WCN7881

CWE

CWE-126

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.