CVE-2025-27030
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-09-24

Last updated on: 2025-09-25

Assigner: Qualcomm, Inc.

Description
information disclosure while invoking calibration data from user space to update firmware size.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-24
Last Modified
2025-09-25
Generated
2026-06-16
AI Q&A
2025-09-24
EPSS Evaluated
2026-06-15
NVD
CVE-2025-27030
Affected Vendors & Products
Showing 82 associated CPEs
Vendor Product Version / Range
qualcomm c-v2x_9150_firmware *
qualcomm c-v2x_9150 *
qualcomm qam8295p_firmware *
qualcomm qam8295p *
qualcomm qca6574au_firmware *
qualcomm qca6574au *
qualcomm qca6584au_firmware *
qualcomm qca6584au *
qualcomm qca6696_firmware *
qualcomm qca6696 *
qualcomm qca6698aq_firmware *
qualcomm qca6698aq *
qualcomm qca9367_firmware *
qualcomm qca9367 *
qualcomm qca9377_firmware *
qualcomm qca9377 *
qualcomm qcn9074_firmware *
qualcomm qcn9074 *
qualcomm qcs410_firmware *
qualcomm qcs410 *
qualcomm qcs610_firmware *
qualcomm qcs610 *
qualcomm qsm8250_firmware *
qualcomm qsm8250 *
qualcomm video_collaboration_vc1_platform_firmware *
qualcomm video_collaboration_vc1_platform *
qualcomm video_collaboration_vc3_platform_firmware *
qualcomm video_collaboration_vc3_platform *
qualcomm sa6145p_firmware *
qualcomm sa6145p *
qualcomm sa6150p_firmware *
qualcomm sa6150p *
qualcomm sa6155p_firmware *
qualcomm sa6155p *
qualcomm sa8145p_firmware *
qualcomm sa8145p *
qualcomm sa8150p_firmware *
qualcomm sa8150p *
qualcomm sa8155p_firmware *
qualcomm sa8155p *
qualcomm sa8195p_firmware *
qualcomm sa8195p *
qualcomm sa8295p_firmware *
qualcomm sa8295p *
qualcomm sa8530p_firmware *
qualcomm sa8530p *
qualcomm sa8540p_firmware *
qualcomm sa8540p *
qualcomm sa9000p_firmware *
qualcomm sa9000p *
qualcomm sdx55_firmware *
qualcomm sdx55 *
qualcomm snapdragon_auto_5g_modem-rf_firmware *
qualcomm snapdragon_auto_5g_modem-rf *
qualcomm snapdragon_auto_5g_modem-rf_gen_2_firmware *
qualcomm snapdragon_auto_5g_modem-rf_gen_2 *
qualcomm sw5100_firmware *
qualcomm sw5100 *
qualcomm sw5100p_firmware *
qualcomm sw5100p *
qualcomm wcd9341_firmware *
qualcomm wcd9341 *
qualcomm wcd9370_firmware *
qualcomm wcd9370 *
qualcomm wcn3660b_firmware *
qualcomm wcn3660b *
qualcomm wcn3680b_firmware *
qualcomm wcn3680b *
qualcomm wcn3950_firmware *
qualcomm wcn3950 *
qualcomm wcn3980_firmware *
qualcomm wcn3980 *
qualcomm wcn3988_firmware *
qualcomm wcn3988 *
qualcomm wsa8810_firmware *
qualcomm wsa8810 *
qualcomm wsa8815_firmware *
qualcomm wsa8815 *
qualcomm wsa8830_firmware *
qualcomm wsa8830 *
qualcomm wsa8835_firmware *
qualcomm wsa8835 *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-126 The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability involves information disclosure that occurs when calibration data is invoked from user space to update the firmware size. Essentially, sensitive information may be exposed during this process.

Impact Analysis

The vulnerability can lead to unauthorized disclosure of sensitive information, which could be exploited to compromise system confidentiality. It has a high impact on confidentiality but does not affect integrity and has a low impact on availability.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-27030. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart