CVE-2025-27063
Analyzed
Analyzed - Analysis Complete
BaseFortify
Publication date: 2025-12-18
Last updated on: 2026-01-28
Assigner: Qualcomm, Inc.
Description
Description
Memory corruption during video playback when video session open fails with time out error.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| qualcomm | csra6620_firmware | * |
| qualcomm | csra6620 | * |
| qualcomm | csra6640_firmware | * |
| qualcomm | csra6640 | * |
| qualcomm | fastconnect_6200_firmware | * |
| qualcomm | fastconnect_6200 | * |
| qualcomm | fastconnect_6700_firmware | * |
| qualcomm | fastconnect_6700 | * |
| qualcomm | fastconnect_6800_firmware | * |
| qualcomm | fastconnect_6800 | * |
| qualcomm | sxr1230p_firmware | * |
| qualcomm | sxr1230p | * |
| qualcomm | sxr2230p_firmware | * |
| qualcomm | sxr2230p | * |
| qualcomm | video_collaboration_vc1_platform_firmware | * |
| qualcomm | video_collaboration_vc1_platform | * |
| qualcomm | video_collaboration_vc3_platform_firmware | * |
| qualcomm | video_collaboration_vc3_platform | * |
| qualcomm | video_collaboration_vc5_platform_firmware | * |
| qualcomm | video_collaboration_vc5_platform | * |
| qualcomm | wcd9326_firmware | * |
| qualcomm | wcd9326 | * |
| qualcomm | wcd9335_firmware | * |
| qualcomm | wcd9335 | * |
| qualcomm | wcd9341_firmware | * |
| qualcomm | wcd9341 | * |
| qualcomm | wcd9370_firmware | * |
| qualcomm | wcd9370 | * |
| qualcomm | wcd9375_firmware | * |
| qualcomm | wcd9375 | * |
| qualcomm | wcd9380_firmware | * |
| qualcomm | wcd9380 | * |
| qualcomm | wcd9385_firmware | * |
| qualcomm | wcd9385 | * |
| qualcomm | wcn3615_firmware | * |
| qualcomm | wcn3615 | * |
| qualcomm | wcn3660b_firmware | * |
| qualcomm | wcn3660b | * |
| qualcomm | wcn3680b_firmware | * |
| qualcomm | wcn3680b | * |
| qualcomm | wcn3910_firmware | * |
| qualcomm | wcn3910 | * |
| qualcomm | wcn3950_firmware | * |
| qualcomm | wcn3950 | * |
| qualcomm | wcn3980_firmware | * |
| qualcomm | wcn3980 | * |
| qualcomm | wcn3988_firmware | * |
| qualcomm | wcn3988 | * |
| qualcomm | wcn3990_firmware | * |
| qualcomm | wcn3990 | * |
| qualcomm | wcn6740_firmware | * |
| qualcomm | wcn6740 | * |
| qualcomm | wsa8810_firmware | * |
| qualcomm | wsa8810 | * |
| qualcomm | wsa8815_firmware | * |
| qualcomm | wsa8815 | * |
| qualcomm | wsa8830_firmware | * |
| qualcomm | wsa8830 | * |
| qualcomm | wsa8832_firmware | * |
| qualcomm | wsa8832 | * |
| qualcomm | wsa8835_firmware | * |
| qualcomm | wsa8835 | * |
| qualcomm | fastconnect_6900_firmware | * |
| qualcomm | fastconnect_6900 | * |
| qualcomm | fastconnect_7800_firmware | * |
| qualcomm | fastconnect_7800 | * |
| qualcomm | flight_rb5_5g_platform_firmware | * |
| qualcomm | flight_rb5_5g_platform | * |
| qualcomm | qam8295p_firmware | * |
| qualcomm | qam8295p | * |
| qualcomm | qca6391_firmware | * |
| qualcomm | qca6391 | * |
| qualcomm | qca6574_firmware | * |
| qualcomm | qca6574 | * |
| qualcomm | qca6574a_firmware | * |
| qualcomm | qca6574a | * |
| qualcomm | qca6574au_firmware | * |
| qualcomm | qca6574au | * |
| qualcomm | qca6595_firmware | * |
| qualcomm | qca6595 | * |
| qualcomm | qca6595au_firmware | * |
| qualcomm | qca6595au | * |
| qualcomm | qca6688aq_firmware | * |
| qualcomm | qca6688aq | * |
| qualcomm | qca6696_firmware | * |
| qualcomm | qca6696 | * |
| qualcomm | qca6698aq_firmware | * |
| qualcomm | qca6698aq | * |
| qualcomm | qcm2290_firmware | * |
| qualcomm | qcm2290 | * |
| qualcomm | qcm5430_firmware | * |
| qualcomm | qcm5430 | * |
| qualcomm | qcm6125_firmware | * |
| qualcomm | qcm6125 | * |
| qualcomm | qcm6490_firmware | * |
| qualcomm | qcm6490 | * |
| qualcomm | qcn9011_firmware | * |
| qualcomm | qcn9011 | * |
| qualcomm | qcn9012_firmware | * |
| qualcomm | qcn9012 | * |
| qualcomm | qcs2290_firmware | * |
| qualcomm | qcs2290 | * |
| qualcomm | qcs410_firmware | * |
| qualcomm | qcs410 | * |
| qualcomm | qcs5430_firmware | * |
| qualcomm | qcs5430 | * |
| qualcomm | qcs610_firmware | * |
| qualcomm | qcs610 | * |
| qualcomm | qcs6125_firmware | * |
| qualcomm | qcs6125 | * |
| qualcomm | qcs6490_firmware | * |
| qualcomm | qcs6490 | * |
| qualcomm | qcs7230_firmware | * |
| qualcomm | qcs7230 | * |
| qualcomm | qcs8250_firmware | * |
| qualcomm | qcs8250 | * |
| qualcomm | qrb5165m_firmware | * |
| qualcomm | qrb5165m | * |
| qualcomm | qrb5165n_firmware | * |
| qualcomm | qrb5165n | * |
| qualcomm | qualcomm_215_mobile_platform_firmware | * |
| qualcomm | qualcomm_215_mobile_platform | * |
| qualcomm | robotics_rb2_platform_firmware | * |
| qualcomm | robotics_rb2_platform | * |
| qualcomm | robotics_rb5_platform_firmware | * |
| qualcomm | robotics_rb5_platform | * |
| qualcomm | sa4150p_firmware | * |
| qualcomm | sa4150p | * |
| qualcomm | sa4155p_firmware | * |
| qualcomm | sa4155p | * |
| qualcomm | sa6145p_firmware | * |
| qualcomm | sa6145p | * |
| qualcomm | sa6150p_firmware | * |
| qualcomm | sa6150p | * |
| qualcomm | sa6155p_firmware | * |
| qualcomm | sa6155p | * |
| qualcomm | sa8145p_firmware | * |
| qualcomm | sa8145p | * |
| qualcomm | sa8150p_firmware | * |
| qualcomm | sa8150p | * |
| qualcomm | sa8155p_firmware | * |
| qualcomm | sa8155p | * |
| qualcomm | sa8195p_firmware | * |
| qualcomm | sa8195p | * |
| qualcomm | sa8295p_firmware | * |
| qualcomm | sa8295p | * |
| qualcomm | sd660_firmware | * |
| qualcomm | sd660 | * |
| qualcomm | sd865_5g_firmware | * |
| qualcomm | sd865_5g | * |
| qualcomm | sm7250p_firmware | * |
| qualcomm | sm7250p | * |
| qualcomm | sm7325p_firmware | * |
| qualcomm | sm7325p | * |
| qualcomm | snapdragon_4_gen_1_mobile_platform_firmware | * |
| qualcomm | snapdragon_4_gen_1_mobile_platform | * |
| qualcomm | snapdragon_4_gen_2_mobile_platform_firmware | * |
| qualcomm | snapdragon_4_gen_2_mobile_platform | * |
| qualcomm | snapdragon_460_mobile_platform_firmware | * |
| qualcomm | snapdragon_460_mobile_platform | * |
| qualcomm | snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)_firmware | * |
| qualcomm | snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\) | * |
| qualcomm | snapdragon_480_5g_mobile_platform_firmware | * |
| qualcomm | snapdragon_480_5g_mobile_platform | * |
| qualcomm | snapdragon_660_mobile_platform_firmware | * |
| qualcomm | snapdragon_660_mobile_platform | * |
| qualcomm | snapdragon_662_mobile_platform_firmware | * |
| qualcomm | snapdragon_662_mobile_platform | * |
| qualcomm | snapdragon_680_4g_mobile_platform_firmware | * |
| qualcomm | snapdragon_680_4g_mobile_platform | * |
| qualcomm | snapdragon_685_4g_mobile_platform_\(sm6225-ad\)_firmware | * |
| qualcomm | snapdragon_685_4g_mobile_platform_\(sm6225-ad\) | * |
| qualcomm | snapdragon_690_5g_mobile_platform_firmware | * |
| qualcomm | snapdragon_690_5g_mobile_platform | * |
| qualcomm | snapdragon_695_5g_mobile_platform_firmware | * |
| qualcomm | snapdragon_695_5g_mobile_platform | * |
| qualcomm | snapdragon_765_5g_mobile_platform_\(sm7250-aa\)_firmware | * |
| qualcomm | snapdragon_765_5g_mobile_platform_\(sm7250-aa\) | * |
| qualcomm | snapdragon_765g_5g_mobile_platform_\(sm7250-ab\)_firmware | * |
| qualcomm | snapdragon_765g_5g_mobile_platform_\(sm7250-ab\) | * |
| qualcomm | snapdragon_768g_5g_mobile_platform_\(sm7250-ac\)_firmware | * |
| qualcomm | snapdragon_768g_5g_mobile_platform_\(sm7250-ac\) | * |
| qualcomm | snapdragon_778g\+_5g_mobile_platform_\(sm7325-ae\)_firmware | * |
| qualcomm | snapdragon_778g\+_5g_mobile_platform_\(sm7325-ae\) | * |
| qualcomm | snapdragon_778g_5g_mobile_platform_firmware | * |
| qualcomm | snapdragon_778g_5g_mobile_platform | * |
| qualcomm | snapdragon_782g_mobile_platform_\(sm7325-af\)_firmware | * |
| qualcomm | snapdragon_782g_mobile_platform_\(sm7325-af\) | * |
| qualcomm | snapdragon_7c\+_gen_3_compute_firmware | * |
| qualcomm | snapdragon_7c\+_gen_3_compute | * |
| qualcomm | snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\)_firmware | * |
| qualcomm | snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\) | * |
| qualcomm | snapdragon_865_5g_mobile_platform_firmware | * |
| qualcomm | snapdragon_865_5g_mobile_platform | * |
| qualcomm | snapdragon_870_5g_mobile_platform_\(sm8250-ac\)_firmware | * |
| qualcomm | snapdragon_870_5g_mobile_platform_\(sm8250-ac\) | * |
| qualcomm | snapdragon_888\+_5g_mobile_platform_\(sm8350-ac\)_firmware | * |
| qualcomm | snapdragon_888\+_5g_mobile_platform_\(sm8350-ac\) | * |
| qualcomm | snapdragon_888_5g_mobile_platform_firmware | * |
| qualcomm | snapdragon_888_5g_mobile_platform | * |
| qualcomm | snapdragon_ar1_gen_1_platform_firmware | * |
| qualcomm | snapdragon_ar1_gen_1_platform | * |
| qualcomm | snapdragon_ar1_gen_1_platform_\luna1\_firmware | * |
| qualcomm | snapdragon_ar1_gen_1_platform_\luna1\ | * |
| qualcomm | snapdragon_ar2_gen_1_platform_firmware | * |
| qualcomm | snapdragon_ar2_gen_1_platform | * |
| qualcomm | snapdragon_w5\+_gen_1_wearable_platform_firmware | * |
| qualcomm | snapdragon_w5\+_gen_1_wearable_platform | * |
| qualcomm | snapdragon_x55_5g_modem-rf_system_firmware | * |
| qualcomm | snapdragon_x55_5g_modem-rf_system | * |
| qualcomm | snapdragon_xr2\+_gen_1_platform_firmware | * |
| qualcomm | snapdragon_xr2\+_gen_1_platform | * |
| qualcomm | snapdragon_xr2_5g_platform_firmware | * |
| qualcomm | snapdragon_xr2_5g_platform | * |
| qualcomm | ssg2115p_firmware | * |
| qualcomm | ssg2115p | * |
| qualcomm | ssg2125p_firmware | * |
| qualcomm | ssg2125p | * |
| qualcomm | sw5100_firmware | * |
| qualcomm | sw5100 | * |
| qualcomm | sw5100p_firmware | * |
| qualcomm | sw5100p | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-416 | The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer. |