CVE-2025-27040 — Improper Input Validation in TZ Firmware

Description (CNA)

Information disclosure may occur while processing the hypervisor log.

Affected (CNA)

Vendor / product	Versions
Qualcomm, Inc. / Snapdragon	affected CSR8811; affected Immersive Home 214 Platform; affected Immersive Home 216 Platform; affected Immersive Home 316 Platform; affected Immersive Home 318 Platform; affected IPQ5010; affected IPQ5028; affected IPQ8070; affected IPQ8070A; affected IPQ8071; affected IPQ8071A; affected IPQ8072; affected IPQ8072A; affected IPQ8074; affected IPQ8074A; affected IPQ8076; affected IPQ8076A; affected IPQ8078; affected IPQ8078A; affected IPQ8173; affected IPQ8174; affected IPQ9008; affected IPQ9574; affected PMP8074; affected QCA4024; affected QCA6428; affected QCA6438; affected QCA6694; affected QCA8072; affected QCA8075; affected QCA8081; affected QCA9888; affected QCA9889; affected QCA9984; affected QCN5022; affected QCN5024; affected QCN5052; affected QCN5054; affected QCN5064; affected QCN5122; affected QCN5124; affected QCN5152; affected QCN5154; affected QCN5164; affected QCN5550; affected QCN6023; affected QCN6024; affected QCN6100; affected QCN6102; affected QCN6112; affected QCN6122; affected QCN6132; affected QCN9000; affected QCN9001; affected QCN9002; affected QCN9003; affected QCN9012; affected QCN9022; affected QCN9024; affected QCN9070; affected QCN9072; affected QCN9074; affected QCN9100; affected QCN9274; affected SDX55

Vendor / product

Versions

Qualcomm, Inc. / Snapdragon

affected CSR8811; affected Immersive Home 214 Platform; affected Immersive Home 216 Platform; affected Immersive Home 316 Platform; affected Immersive Home 318 Platform; affected IPQ5010; affected IPQ5028; affected IPQ8070; affected IPQ8070A; affected IPQ8071; affected IPQ8071A; affected IPQ8072; affected IPQ8072A; affected IPQ8074; affected IPQ8074A; affected IPQ8076; affected IPQ8076A; affected IPQ8078; affected IPQ8078A; affected IPQ8173; affected IPQ8174; affected IPQ9008; affected IPQ9574; affected PMP8074; affected QCA4024; affected QCA6428; affected QCA6438; affected QCA6694; affected QCA8072; affected QCA8075; affected QCA8081; affected QCA9888; affected QCA9889; affected QCA9984; affected QCN5022; affected QCN5024; affected QCN5052; affected QCN5054; affected QCN5064; affected QCN5122; affected QCN5124; affected QCN5152; affected QCN5154; affected QCN5164; affected QCN5550; affected QCN6023; affected QCN6024; affected QCN6100; affected QCN6102; affected QCN6112; affected QCN6122; affected QCN6132; affected QCN9000; affected QCN9001; affected QCN9002; affected QCN9003; affected QCN9012; affected QCN9022; affected QCN9024; affected QCN9070; affected QCN9072; affected QCN9074; affected QCN9100; affected QCN9274; affected SDX55

CWE

CWE-20

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.