CVE-2025-27074 — Incorrect Calculation of Buffer Size in SCE-Mink

Description (CNA)

Memory corruption while processing a GP command response.

Affected (CNA)

Vendor / product	Versions
Qualcomm, Inc. / Snapdragon	affected APQ8064AU; affected CSR8811; affected Immersive Home 214 Platform; affected Immersive Home 216 Platform; affected Immersive Home 316 Platform; affected Immersive Home 318 Platform; affected IPQ5010; affected IPQ5028; affected IPQ8070; affected IPQ8070A; affected IPQ8071; affected IPQ8071A; affected IPQ8072; affected IPQ8072A; affected IPQ8074; affected IPQ8074A; affected IPQ8076; affected IPQ8076A; affected IPQ8078; affected IPQ8078A; affected IPQ8173; affected IPQ8174; affected IPQ9008; affected IPQ9574; affected MDM9640; affected MDM9650; affected MSM8996AU; affected PMP8074; affected QCA4024; affected QCA6174A; affected QCA6234; affected QCA6310; affected QCA6320; affected QCA6428; affected QCA6438; affected QCA6564A; affected QCA6564AU; affected QCA6574; affected QCA6574A; affected QCA6574AU; affected QCA6584AU; affected QCA6694; affected QCA8072; affected QCA8075; affected QCA8081; affected QCA9888; affected QCA9889; affected QCA9984; affected QCN5022; affected QCN5024; affected QCN5052; affected QCN5054; affected QCN5064; affected QCN5122; affected QCN5124; affected QCN5152; affected QCN5154; affected QCN5164; affected QCN5550; affected QCN6023; affected QCN6024; affected QCN6100; affected QCN6102; affected QCN6112; affected QCN6122; affected QCN6132; affected QCN9000; affected QCN9001; affected QCN9002; affected QCN9003; affected QCN9012; affected QCN9022; affected QCN9024; affected QCN9070; affected QCN9072; affected QCN9074; affected QCN9100; affected QCN9274; affected SD820; affected SD821; affected SDM429W; affected SDX55; affected Snapdragon 429 Mobile Platform; affected Snapdragon 820 Automotive Platform; affected Snapdragon 820 Mobile Platform; affected Snapdragon 821 Mobile Platform; affected Snapdragon Wear 4100+ Platform; affected WCD9335; affected WCN3610; affected WCN3620; affected WCN3660B; affected WCN3680B; affected WCN3980; affected WSA8810; affected WSA8815

Vendor / product

Versions

Qualcomm, Inc. / Snapdragon

affected APQ8064AU; affected CSR8811; affected Immersive Home 214 Platform; affected Immersive Home 216 Platform; affected Immersive Home 316 Platform; affected Immersive Home 318 Platform; affected IPQ5010; affected IPQ5028; affected IPQ8070; affected IPQ8070A; affected IPQ8071; affected IPQ8071A; affected IPQ8072; affected IPQ8072A; affected IPQ8074; affected IPQ8074A; affected IPQ8076; affected IPQ8076A; affected IPQ8078; affected IPQ8078A; affected IPQ8173; affected IPQ8174; affected IPQ9008; affected IPQ9574; affected MDM9640; affected MDM9650; affected MSM8996AU; affected PMP8074; affected QCA4024; affected QCA6174A; affected QCA6234; affected QCA6310; affected QCA6320; affected QCA6428; affected QCA6438; affected QCA6564A; affected QCA6564AU; affected QCA6574; affected QCA6574A; affected QCA6574AU; affected QCA6584AU; affected QCA6694; affected QCA8072; affected QCA8075; affected QCA8081; affected QCA9888; affected QCA9889; affected QCA9984; affected QCN5022; affected QCN5024; affected QCN5052; affected QCN5054; affected QCN5064; affected QCN5122; affected QCN5124; affected QCN5152; affected QCN5154; affected QCN5164; affected QCN5550; affected QCN6023; affected QCN6024; affected QCN6100; affected QCN6102; affected QCN6112; affected QCN6122; affected QCN6132; affected QCN9000; affected QCN9001; affected QCN9002; affected QCN9003; affected QCN9012; affected QCN9022; affected QCN9024; affected QCN9070; affected QCN9072; affected QCN9074; affected QCN9100; affected QCN9274; affected SD820; affected SD821; affected SDM429W; affected SDX55; affected Snapdragon 429 Mobile Platform; affected Snapdragon 820 Automotive Platform; affected Snapdragon 820 Mobile Platform; affected Snapdragon 821 Mobile Platform; affected Snapdragon Wear 4100+ Platform; affected WCD9335; affected WCN3610; affected WCN3620; affected WCN3660B; affected WCN3680B; affected WCN3980; affected WSA8810; affected WSA8815

CWE

CWE-131

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2025-bulletin.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.