Back to the CVE list
CVE-2025-27040

Improper input validation in Qualcomm Csr8811 Firmware

CVSS score

6.5

EPSS probability

%0.1

Risk score

0.0

Published

1 y ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2025-27040 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Information disclosure may occur while processing the hypervisor log.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2025-27040 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1qualcommcsr8811 firmware View
2qualcommcsr8811 View
3qualcommimmersive home 214 platform firmware View
4qualcommimmersive home 214 platform View
5qualcommimmersive home 216 platform firmware View
6qualcommimmersive home 216 platform View
7qualcommimmersive home 316 platform firmware View
8qualcommimmersive home 316 platform View
9qualcommimmersive home 318 platform firmware View
10qualcommimmersive home 318 platform View
11qualcommipq5010 firmware View
12qualcommipq5010 View
13qualcommipq5028 firmware View
14qualcommipq5028 View
15qualcommipq8070 firmware View
16qualcommipq8070 View
17qualcommipq8070a firmware View
18qualcommipq8070a View
19qualcommipq8071 firmware View
20qualcommipq8071 View
21qualcommipq8071a firmware View
22qualcommipq8071a View
23qualcommipq8072 firmware View
24qualcommipq8072 View
25qualcommipq8072a firmware View
26qualcommipq8072a View
27qualcommipq8074 firmware View
28qualcommipq8074 View
29qualcommipq8074a firmware View
30qualcommipq8074a View
31qualcommipq8076 firmware View
32qualcommipq8076 View
33qualcommipq8076a firmware View
34qualcommipq8076a View
35qualcommipq8078 firmware View
36qualcommipq8078 View
37qualcommipq8078a firmware View
38qualcommipq8078a View
39qualcommipq8173 firmware View
40qualcommipq8173 View
41qualcommipq8174 firmware View
42qualcommipq8174 View
43qualcommipq9008 firmware View
44qualcommipq9008 View
45qualcommipq9574 firmware View
46qualcommipq9574 View
47qualcommpmp8074 firmware View
48qualcommpmp8074 View
49qualcommqca4024 firmware View
50qualcommqca4024 View
51qualcommqca6428 firmware View
52qualcommqca6428 View
53qualcommqca6438 firmware View
54qualcommqca6438 View
55qualcommqca6694 firmware View
56qualcommqca6694 View
57qualcommqca8072 firmware View
58qualcommqca8072 View
59qualcommqca8075 firmware View
60qualcommqca8075 View
61qualcommqca8081 firmware View
62qualcommqca8081 View
63qualcommqca9888 firmware View
64qualcommqca9888 View
65qualcommqca9889 firmware View
66qualcommqca9889 View
67qualcommqca9984 firmware View
68qualcommqca9984 View
69qualcommqcn5022 firmware View
70qualcommqcn5022 View
71qualcommqcn5024 firmware View
72qualcommqcn5024 View
73qualcommqcn5052 firmware View
74qualcommqcn5052 View
75qualcommqcn5054 firmware View
76qualcommqcn5054 View
77qualcommqcn5064 firmware View
78qualcommqcn5064 View
79qualcommqcn5122 firmware View
80qualcommqcn5122 View
81qualcommqcn5124 firmware View
82qualcommqcn5124 View
83qualcommqcn5152 firmware View
84qualcommqcn5152 View
85qualcommqcn5154 firmware View
86qualcommqcn5154 View
87qualcommqcn5164 firmware View
88qualcommqcn5164 View
89qualcommqcn5550 firmware View
90qualcommqcn5550 View
91qualcommqcn6023 firmware View
92qualcommqcn6023 View
93qualcommqcn6024 firmware View
94qualcommqcn6024 View
95qualcommqcn6100 firmware View
96qualcommqcn6100 View
97qualcommqcn6102 firmware View
98qualcommqcn6102 View
99qualcommqcn6112 firmware View
100qualcommqcn6112 View
101qualcommqcn6122 firmware View
102qualcommqcn6122 View
103qualcommqcn6132 firmware View
104qualcommqcn6132 View
105qualcommqcn9000 firmware View
106qualcommqcn9000 View
107qualcommqcn9001 firmware View
108qualcommqcn9001 View
109qualcommqcn9002 firmware View
110qualcommqcn9002 View
111qualcommqcn9003 firmware View
112qualcommqcn9003 View
113qualcommqcn9012 firmware View
114qualcommqcn9012 View
115qualcommqcn9022 firmware View
116qualcommqcn9022 View
117qualcommqcn9024 firmware View
118qualcommqcn9024 View
119qualcommqcn9070 firmware View
120qualcommqcn9070 View
121qualcommqcn9072 firmware View
122qualcommqcn9072 View
123qualcommqcn9074 firmware View
124qualcommqcn9074 View
125qualcommqcn9100 firmware View
126qualcommqcn9100 View
127qualcommqcn9274 firmware View
128qualcommqcn9274 View
129qualcommsdx55 firmware View
130qualcommsdx55 View
Total affected vendors: 1|Products: 130

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
6.5CVSS V31MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:NNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-27040 is associated with the following CWEs:

CWE-20: Improper Input Validation

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-27040 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim
PermissionsLow
UserGerekmiyor

Official Sources and Advisories

https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.htmlvendor-advisory

CVSS Vector Radar Chart

6.5 / 10
Attack VectorLocalComplexityLowPrivilegesLowUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityNone

Vulnerability Scoring Details

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow privileges
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)None

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

Q
qualcomm logo
qualcomm

Weakness Type (CWE & CAPEC)

CWE-20

Similar Vulnerabilities

6.5
CVE-2020-3702Vulnerability in Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure And Networking
QI
Qualcomm, Inc. logo
VendorQualcomm, Inc.ProductSnapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking+27 etkilenen
Patch status unknownEPSS %06 y ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-27040"