BaseFortify

Publication date: 2025-10-09

Last updated on: 2025-10-15

Assigner: Qualcomm, Inc.

Description

Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-09

Last Modified

2025-10-15

Generated

2026-07-06

AI Q&A

2025-10-09

EPSS Evaluated

2026-07-05

NVD

CVE-2025-27039

Affected Vendors & Products

Vendor	Product	Version / Range
qualcomm	fastconnect_6900_firmware	*
qualcomm	fastconnect_6900	*
qualcomm	fastconnect_7800_firmware	*
qualcomm	fastconnect_7800	*
qualcomm	sxr2230p_firmware	*
qualcomm	sxr2230p	*
qualcomm	sxr2250p_firmware	*
qualcomm	sxr2250p	*
qualcomm	wcd9380_firmware	*
qualcomm	wcd9380	*
qualcomm	wcd9385_firmware	*
qualcomm	wcd9385	*
qualcomm	wsa8830_firmware	*
qualcomm	wsa8830	*
qualcomm	wsa8832_firmware	*
qualcomm	wsa8832	*
qualcomm	wsa8835_firmware	*
qualcomm	wsa8835	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-390	The product detects a specific error, but takes no actions to handle the error.

Attack-Flow Graph

Executive Summary

This vulnerability involves memory corruption that may occur when processing an IOCTL call related to the DMM/WARPNCC CONFIG request. Memory corruption can lead to unexpected behavior or crashes in the affected system.

Impact Analysis

The vulnerability can impact you by causing memory corruption, which may lead to denial of service (system crashes) or potentially allow an attacker with limited privileges to affect the integrity and availability of the system.

Hi! I’m here to help you understand CVE-2025-27039. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70