CVE-2025-27061
HIGHCVSS 7.8/10EPSS 0.09%
Last modified
CVE-2025-27061 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.. EPSS estimates a 0.09% chance of exploitation in the next 30 days.
Description
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | 315 5g Iot Firmware | All versions |
| Qualcomm | Aqt1000 Firmware | All versions |
| Qualcomm | Ar8031 Firmware | All versions |
| Qualcomm | Ar8035 Firmware | All versions |
| Qualcomm | C-V2x 9150 Firmware | All versions |
| Qualcomm | Mdm9628 Firmware | All versions |
| Qualcomm | Qam8255p Firmware | All versions |
| Qualcomm | Qam8295p Firmware | All versions |
| Qualcomm | Qam8620p Firmware | All versions |
| Qualcomm | Qam8650p Firmware | All versions |
| Qualcomm | Qam8775p Firmware | All versions |
| Qualcomm | Qamsrv1h Firmware | All versions |
| Qualcomm | Qamsrv1m Firmware | All versions |
| Qualcomm | Qca0000 Firmware | All versions |
| Qualcomm | Qca4024 Firmware | All versions |
| Qualcomm | Qca6174a Firmware | All versions |
| Qualcomm | Qca6391 Firmware | All versions |
| Qualcomm | Qca6420 Firmware | All versions |
| Qualcomm | Qca6426 Firmware | All versions |
| Qualcomm | Qca6430 Firmware | All versions |
| Qualcomm | Qca6436 Firmware | All versions |
| Qualcomm | Qca6564 Firmware | All versions |
| Qualcomm | Qca6564a Firmware | All versions |
| Qualcomm | Qca6564au Firmware | All versions |
| Qualcomm | Qca6574 Firmware | All versions |
| Qualcomm | Qca6574a Firmware | All versions |
| Qualcomm | Qca6574au Firmware | All versions |
| Qualcomm | Qca6584au Firmware | All versions |
| Qualcomm | Qca6595 Firmware | All versions |
| Qualcomm | Qca6595au Firmware | All versions |
| Qualcomm | Qca6678aq Firmware | All versions |
| Qualcomm | Qca6688aq Firmware | All versions |
| Qualcomm | Qca6696 Firmware | All versions |
| Qualcomm | Qca6698aq Firmware | All versions |
| Qualcomm | Qca6698au Firmware | All versions |
| Qualcomm | Qca6797aq Firmware | All versions |
| Qualcomm | Qca8072 Firmware | All versions |
| Qualcomm | Qca8075 Firmware | All versions |
| Qualcomm | Qca8080 Firmware | All versions |
| Qualcomm | Qca8081 Firmware | All versions |
| Qualcomm | Qca8082 Firmware | All versions |
| Qualcomm | Qca8084 Firmware | All versions |
| Qualcomm | Qca8085 Firmware | All versions |
| Qualcomm | Qca8101 Firmware | All versions |
| Qualcomm | Qca8337 Firmware | All versions |
| Qualcomm | Sd855 Firmware | All versions |
| Qualcomm | Sd865 5g Firmware | All versions |
| Qualcomm | Sd888 Firmware | All versions |
| Qualcomm | Sdx55 Firmware | All versions |
| Qualcomm | Sdx61 Firmware | All versions |
Showing 50 of 344 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-27061?
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
How severe is CVE-2025-27061?
CVE-2025-27061 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.09% probability of exploitation in the next 30 days.
How do I fix CVE-2025-27061?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-27056Memory corruption during sub-system restart while processing…7.8
- CVE-2025-27057Transient DOS while handling beacon frames with invalid IE h…7.5
- CVE-2025-27058Memory corruption while processing packet data with exceedin…7.8
- CVE-2025-27059Memory corruption while performing SCM call.8.8
- CVE-2025-2706A vulnerability classified as critical was found in Digiwin …6.3
- CVE-2025-27060Memory corruption while performing SCM call with malformed i…8.8
- CVE-2025-27062Memory corruption while handling client exceptions, allowing…7.8
- CVE-2025-27063Memory corruption during video playback when video session o…7.8
- CVE-2025-27064Information disclosure while registering commands from clien…6.1
- CVE-2025-27065Transient DOS while processing a frame with malformed shared…7.5
- CVE-2025-27066Transient DOS while processing an ANQP message.7.5
- CVE-2025-27067Memory corruption while processing DDI call with invalid buf…7.8
Are you affected by CVE-2025-27061?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
