CVE-2025-27033 Details
Description
Information disclosure while running video usecase having rogue firmware.
A vulnerability allowing information disclosure has been identified in various chipsets of Qualcomm products. This issue arises while running video use cases with rogue firmware, leading to a buffer over-read and unauthorized access to sensitive information.
Qualcomm has notified device manufacturers about this vulnerability and is actively sharing patches. Instructions for applying the patch can be found in the Qualcomm September 2025 Security Bulletin.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Sep 25, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-126 | Buffer Over-read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| qualcomm qcm5430 firmware | All versions |
CPE
Remediation
| |
| qualcomm qcm5430 | All versions |
CPE
Remediation
| |
| qualcomm qcm6490 firmware | All versions |
CPE
Remediation
| |
| qualcomm qcm6490 | All versions |
CPE
Remediation
| |
| qualcomm qcs5430 firmware | All versions |
CPE
Remediation
| |
| qualcomm qcs5430 | All versions |
CPE
Remediation
| |
| qualcomm qcs6490 firmware | All versions |
CPE
Remediation
| |
| qualcomm qcs6490 | All versions |
CPE
Remediation
| |
| qualcomm qcm8550 firmware | All versions |
CPE
Remediation
| |
| qualcomm qcm8550 | All versions |
CPE
Remediation
| |
| qualcomm qcs8550 firmware | All versions |
CPE
Remediation
| |
| qualcomm qcs8550 | All versions |
CPE
Remediation
| |
| qualcomm qcs615 firmware | All versions |
CPE
Remediation
| |
| qualcomm qcs615 | All versions |
CPE
Remediation
| |
| qualcomm qcs9100 firmware | All versions |
CPE
Remediation
| |
| qualcomm qcs9100 | All versions |
CPE
Remediation
| |
| qualcomm sm6650 firmware | All versions |
CPE
Remediation
| |
| qualcomm sm6650 | All versions |
CPE
Remediation
| |
| qualcomm sm7635 firmware | All versions |
CPE
Remediation
| |
| qualcomm sm7635 | All versions |
CPE
Remediation
| |
| qualcomm sm8650 firmware | All versions |
CPE
Remediation
| |
| qualcomm sm8650 | All versions |
CPE
Remediation
| |
| qualcomm sm8650p firmware | All versions |
CPE
Remediation
| |
| qualcomm sm8650p | All versions |
CPE
Remediation
| |
| qualcomm sm8650q firmware | All versions |
CPE
Remediation
| |
| qualcomm sm8650q | All versions |
CPE
Remediation
| |
| qualcomm sm7675 firmware | All versions |
CPE
Remediation
| |
| qualcomm sm7675 | All versions |
CPE
Remediation
| |
| qualcomm sm7675p firmware | All versions |
CPE
Remediation
| |
| qualcomm sm7675p | All versions |
CPE
Remediation
| |
| qualcomm sm8635 firmware | All versions |
CPE
Remediation
| |
| qualcomm sm8635 | All versions |
CPE
Remediation
| |
| qualcomm sm8635p firmware | All versions |
CPE
Remediation
| |
| qualcomm sm8635p | All versions |
CPE
Remediation
| |
| qualcomm sm8750 firmware | All versions |
CPE
Remediation
| |
| qualcomm sm8750 | All versions |
CPE
Remediation
| |
| qualcomm sm8750p firmware | All versions |
CPE
Remediation
| |
| qualcomm sm8750p | All versions |
CPE
Remediation
| |
| qualcomm sxr2330p firmware | All versions |
CPE
Remediation
| |
| qualcomm sxr2330p | All versions |
CPE
Remediation
| |
| qualcomm wcn6750 firmware | All versions |
CPE
Remediation
| |
| qualcomm wcn6750 | All versions |
CPE
Remediation
| |
| qualcomm wcn6856 firmware | All versions |
CPE
Remediation
| |
| qualcomm wcn6856 | All versions |
CPE
Remediation
| |
| qualcomm qcn9274 firmware | All versions |
CPE
Remediation
| |
| qualcomm qcn9274 | All versions |
CPE
Remediation
| |
| qualcomm wcn7851 firmware | All versions |
CPE
Remediation
| |
| qualcomm wcn7851 | All versions |
CPE
Remediation
| |
| qualcomm qca6698aq firmware | All versions |
CPE
Remediation
| |
| qualcomm qca6698aq | All versions |
CPE
Remediation
| |
| qualcomm wcn6650 firmware | All versions |
CPE
Remediation
| |
| qualcomm wcn6650 | All versions |
CPE
Remediation
| |
| qualcomm wcn6755 firmware | All versions |
CPE
Remediation
| |
| qualcomm wcn6755 | All versions |
CPE
Remediation
| |
| qualcomm wcn7850 firmware | All versions |
CPE
Remediation
| |
| qualcomm wcn7850 | All versions |
CPE
Remediation
| |
| qualcomm wcn7880 firmware | All versions |
CPE
Remediation
| |
| qualcomm wcn7880 | All versions |
CPE
Remediation
| |
| qualcomm wcn7860 firmware | All versions |
CPE
Remediation
| |
| qualcomm wcn7860 | All versions |
CPE
Remediation
| |
| qualcomm wcn7861 firmware | All versions |
CPE
Remediation
| |
| qualcomm wcn7861 | All versions |
CPE
Remediation
| |
| qualcomm wcn7881 firmware | All versions |
CPE
Remediation
| |
| qualcomm wcn7881 | All versions |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 26, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Sep 25, 2025 | Initial Analysis | [email protected] |
| Sep 24, 2025 | New CVE Received | [email protected] |