CVE-2025-27060 — Untrusted Pointer Dereference in TZ Firmware

Description (CNA)

Memory corruption while performing SCM call with malformed inputs.

Affected (CNA)

Vendor / product	Versions
Qualcomm, Inc. / Snapdragon	affected Immersive Home 214 Platform; affected Immersive Home 216 Platform; affected Immersive Home 316 Platform; affected Immersive Home 318 Platform; affected IPQ5010; affected IPQ5028; affected QCN6023; affected QCN6024; affected QCN6100; affected QCN6102; affected QCN6112; affected QCN6122; affected QCN6132; affected QCN9000; affected QCN9001; affected QCN9002; affected QCN9003; affected QCN9012; affected QCN9022; affected QCN9024; affected QCN9070; affected QCN9072; affected QCN9074; affected QCN9100; affected QCN9274

Vendor / product

Versions

Qualcomm, Inc. / Snapdragon

affected Immersive Home 214 Platform; affected Immersive Home 216 Platform; affected Immersive Home 316 Platform; affected Immersive Home 318 Platform; affected IPQ5010; affected IPQ5028; affected QCN6023; affected QCN6024; affected QCN6100; affected QCN6102; affected QCN6112; affected QCN6122; affected QCN6132; affected QCN9000; affected QCN9001; affected QCN9002; affected QCN9003; affected QCN9012; affected QCN9022; affected QCN9024; affected QCN9070; affected QCN9072; affected QCN9074; affected QCN9100; affected QCN9274

CWE

CWE-822

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.