Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2025-27072 Details
Description
Information disclosure while processing a packet at EAVB BE side with invalid header length.
A vulnerability has been identified in Qualcomm's Automotive Vehicle Networks component, specifically in chipsets such as QCA6574A, QCA6574AU, QCA6595, QCA6595AU, QCA6688AQ, QCA6696, QCA6698AQ, and several others. This vulnerability allows for information disclosure while processing packets at the EAVB BE side, particularly when the header length is invalid.
Qualcomm has notified customers about this vulnerability and is actively sharing patches. Instructions for applying the patch can be found in the Qualcomm August 2025 Security Bulletin.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Aug 6, 2025Exploitation: NoneAutomatable: NoTechnical Impact: Partial
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2025-bulletin.html | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-120 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| qualcomm qam8255p firmware | All versions |
CPE
Remediation
| |
| qualcomm qam8255p | All versions |
CPE
Remediation
| |
| qualcomm qam8295p firmware | All versions |
CPE
Remediation
| |
| qualcomm qam8295p | All versions |
CPE
Remediation
| |
| qualcomm qam8620p firmware | All versions |
CPE
Remediation
| |
| qualcomm qam8620p | All versions |
CPE
Remediation
| |
| qualcomm qam8650p firmware | All versions |
CPE
Remediation
| |
| qualcomm qam8650p | All versions |
CPE
Remediation
| |
| qualcomm qam8775p firmware | All versions |
CPE
Remediation
| |
| qualcomm qam8775p | All versions |
CPE
Remediation
| |
| qualcomm qamsrv1h firmware | All versions |
CPE
Remediation
| |
| qualcomm qamsrv1h | All versions |
CPE
Remediation
| |
| qualcomm qamsrv1m firmware | All versions |
CPE
Remediation
| |
| qualcomm qamsrv1m | All versions |
CPE
Remediation
| |
| qualcomm qca6574a firmware | All versions |
CPE
Remediation
| |
| qualcomm qca6574a | All versions |
CPE
Remediation
| |
| qualcomm qca6574au firmware | All versions |
CPE
Remediation
| |
| qualcomm qca6574au | All versions |
CPE
Remediation
| |
| qualcomm qca6595 firmware | All versions |
CPE
Remediation
| |
| qualcomm qca6595 | All versions |
CPE
Remediation
| |
| qualcomm qca6595au firmware | All versions |
CPE
Remediation
| |
| qualcomm qca6595au | All versions |
CPE
Remediation
| |
| qualcomm qca6688aq firmware | All versions |
CPE
Remediation
| |
| qualcomm qca6688aq | All versions |
CPE
Remediation
| |
| qualcomm qca6696 firmware | All versions |
CPE
Remediation
| |
| qualcomm qca6696 | All versions |
CPE
Remediation
| |
| qualcomm qca6698aq firmware | All versions |
CPE
Remediation
| |
| qualcomm qca6698aq | All versions |
CPE
Remediation
| |
| qualcomm sa6145p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa6145p | All versions |
CPE
Remediation
| |
| qualcomm sa6150p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa6150p | All versions |
CPE
Remediation
| |
| qualcomm sa6155 firmware | All versions |
CPE
Remediation
| |
| qualcomm sa6155 | All versions |
CPE
Remediation
| |
| qualcomm sa6155p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa6155p | All versions |
CPE
Remediation
| |
| qualcomm sa7255p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa7255p | All versions |
CPE
Remediation
| |
| qualcomm sa7775p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa7775p | All versions |
CPE
Remediation
| |
| qualcomm sa8145p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8145p | All versions |
CPE
Remediation
| |
| qualcomm sa8150p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8150p | All versions |
CPE
Remediation
| |
| qualcomm sa8155 firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8155 | All versions |
CPE
Remediation
| |
| qualcomm sa8155p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8155p | All versions |
CPE
Remediation
| |
| qualcomm sa8195p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8195p | All versions |
CPE
Remediation
| |
| qualcomm sa8255p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8255p | All versions |
CPE
Remediation
| |
| qualcomm sa8295p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8295p | All versions |
CPE
Remediation
| |
| qualcomm sa8540p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8540p | All versions |
CPE
Remediation
| |
| qualcomm sa8620p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8620p | All versions |
CPE
Remediation
| |
| qualcomm sa8650p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8650p | All versions |
CPE
Remediation
| |
| qualcomm sa8770p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8770p | All versions |
CPE
Remediation
| |
| qualcomm sa8775p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8775p | All versions |
CPE
Remediation
| |
| qualcomm sa9000p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa9000p | All versions |
CPE
Remediation
| |
| qualcomm srv1h firmware | All versions |
CPE
Remediation
| |
| qualcomm srv1h | All versions |
CPE
Remediation
| |
| qualcomm srv1l firmware | All versions |
CPE
Remediation
| |
| qualcomm srv1l | All versions |
CPE
Remediation
| |
| qualcomm srv1m firmware | All versions |
CPE
Remediation
| |
| qualcomm srv1m | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Aug 18, 2025 | Initial Analysis | [email protected] |
| Aug 6, 2025 | New CVE Received | [email protected] |