Back to the CVE list
CVE-2025-27054

Out-of-bounds write in Qualcomm 315 5g Iot Modem Firmware

CVSS score

7.8

EPSS probability

%0.1

Risk score

0.0

Published

1 y ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2025-27054 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Memory corruption while processing a malformed license file during reboot.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2025-27054 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1qualcomm315 5g iot modem firmware View
2qualcomm315 5g iot modem View
3qualcomm9205 lte modem firmware View
4qualcomm9205 lte modem View
5qualcommaqt1000 firmware View
6qualcommaqt1000 View
7qualcommar8031 firmware View
8qualcommar8031 View
9qualcommar8035 firmware View
10qualcommar8035 View
11qualcommsa8770p firmware View
12qualcommsa8770p View
13qualcommsa8775p firmware View
14qualcommsa8775p View
15qualcommsa9000p firmware View
16qualcommsa9000p View
17qualcommsc8180x+sdx55 firmware View
18qualcommsc8180x+sdx55 View
19qualcommsc8380xp firmware View
20qualcommsc8380xp View
21qualcommsd 8 gen1 5g firmware View
22qualcommsd 8 gen1 5g View
23qualcommsd670 firmware View
24qualcommsd670 View
25qualcommsd730 firmware View
26qualcommsd730 View
27qualcommsd855 firmware View
28qualcommsd855 View
29qualcommsd865 5g firmware View
30qualcommsd865 5g View
31qualcommsd888 firmware View
32qualcommsd888 View
33qualcommsdx55 firmware View
34qualcommsdx55 View
35qualcommsdx61 firmware View
36qualcommsdx61 View
37qualcommsdx82 firmware View
38qualcommsdx82 View
39qualcommsdx85 firmware View
40qualcommsdx85 View
41qualcommsg4150p firmware View
42qualcommsg4150p View
43qualcommsg6150 firmware View
44qualcommsg6150 View
45qualcommsg6150p firmware View
46qualcommsg6150p View
47qualcommsg8275p firmware View
48qualcommsg8275p View
49qualcommsm4125 firmware View
50qualcommsm4125 View
51qualcommsm4635 firmware View
52qualcommsm4635 View
53qualcommsm6225p firmware View
54qualcommsm6225p View
55qualcommsm6250 firmware View
56qualcommsm6250 View
57qualcommsm6370 firmware View
58qualcommsm6370 View
59qualcommsm6650 firmware View
60qualcommsm6650 View
61qualcommsm6650p firmware View
62qualcommsm6650p View
63qualcommsm7250p firmware View
64qualcommsm7250p View
65qualcommsm7315 firmware View
66qualcommsm7315 View
67qualcommsm7325p firmware View
68qualcommsm7325p View
69qualcommsm7635 firmware View
70qualcommsm7635 View
71qualcommsm7635p firmware View
72qualcommsm7635p View
73qualcommsm7675 firmware View
74qualcommsm7675 View
75qualcommsm7675p firmware View
76qualcommsm7675p View
77qualcommsm8550p firmware View
78qualcommsm8550p View
79qualcommsm8635 firmware View
80qualcommsm8635 View
81qualcommsm8635p firmware View
82qualcommsm8635p View
83qualcommsm8650q firmware View
84qualcommsm8650q View
85qualcommsm8735 firmware View
86qualcommsm8735 View
87qualcommsm8750 firmware View
88qualcommsm8750 View
89qualcommsm8750p firmware View
90qualcommsm8750p View
91qualcommwsa8830 firmware View
92qualcommwsa8830 View
93qualcommwsa8832 firmware View
94qualcommwsa8832 View
95qualcommwsa8835 firmware View
96qualcommwsa8835 View
97qualcommwsa8840 firmware View
98qualcommwsa8840 View
99qualcommwsa8845 firmware View
100qualcommwsa8845 View
101qualcommwsa8845h firmware View
102qualcommwsa8845h View
103qualcommx2000077 firmware View
104qualcommx2000077 View
105qualcommx2000086 firmware View
106qualcommx2000086 View
107qualcommx2000090 firmware View
108qualcommx2000090 View
109qualcommx2000092 firmware View
110qualcommx2000092 View
111qualcommx2000094 firmware View
112qualcommx2000094 View
113qualcommxg101002 firmware View
114qualcommxg101002 View
115qualcommxg101032 firmware View
116qualcommxg101032 View
117qualcommxg101039 firmware View
118qualcommxg101039 View
119qualcommc-v2x 9150 firmware View
120qualcommc-v2x 9150 View
121qualcommcsra6620 firmware View
122qualcommcsra6620 View
123qualcommcsra6640 firmware View
124qualcommcsra6640 View
125qualcommfastconnect 6200 firmware View
126qualcommfastconnect 6200 View
127qualcommfastconnect 6700 firmware View
128qualcommfastconnect 6700 View
129qualcommfastconnect 6800 firmware View
130qualcommfastconnect 6800 View
131qualcommfastconnect 6900 firmware View
132qualcommfastconnect 6900 View
133qualcommfastconnect 7800 firmware View
134qualcommfastconnect 7800 View
135qualcommflight rb5 5g platform firmware View
136qualcommflight rb5 5g platform View
137qualcommmdm9205s firmware View
138qualcommmdm9205s View
139qualcommqam8255p firmware View
140qualcommqam8255p View
141qualcommqam8295p firmware View
142qualcommqam8295p View
143qualcommqam8620p firmware View
144qualcommqam8620p View
145qualcommqam8650p firmware View
146qualcommqam8650p View
147qualcommqam8775p firmware View
148qualcommqam8775p View
149qualcommqamsrv1h firmware View
150qualcommqamsrv1h View
151qualcommqamsrv1m firmware View
152qualcommqamsrv1m View
153qualcommqca4004 firmware View
154qualcommqca4004 View
155qualcommqca6174a firmware View
156qualcommqca6174a View
157qualcommqca6391 firmware View
158qualcommqca6391 View
159qualcommqca6420 firmware View
160qualcommqca6420 View
161qualcommqca6421 firmware View
162qualcommqca6421 View
163qualcommqca6426 firmware View
164qualcommqca6426 View
165qualcommqca6430 firmware View
166qualcommqca6430 View
167qualcommqca6431 firmware View
168qualcommqca6431 View
169qualcommqca6436 firmware View
170qualcommqca6436 View
171qualcommqca6574 firmware View
172qualcommqca6574 View
173qualcommqca6574a firmware View
174qualcommqca6574a View
175qualcommqca6574au firmware View
176qualcommqca6574au View
177qualcommqca6584au firmware View
178qualcommqca6584au View
179qualcommqca6595 firmware View
180qualcommqca6595 View
181qualcommqca6595au firmware View
182qualcommqca6595au View
183qualcommqca6678aq firmware View
184qualcommqca6678aq View
185qualcommqca6688aq firmware View
186qualcommqca6688aq View
187qualcommqca6696 firmware View
188qualcommqca6696 View
189qualcommqca6698aq firmware View
190qualcommqca6698aq View
191qualcommqca6698au firmware View
192qualcommqca6698au View
193qualcommqca6797aq firmware View
194qualcommqca6797aq View
195qualcommqca8081 firmware View
196qualcommqca8081 View
197qualcommqca8337 firmware View
198qualcommqca8337 View
199qualcommsm8850 firmware View
200qualcommsm8850 View
Total affected vendors: 1|Products: 200

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
7.8CVSS V31HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-27054 is associated with the following CWEs:

CWE-787: Out-of-bounds Write

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-27054 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim
PermissionsLow
UserGerekmiyor

Official Sources and Advisories

https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.htmlvendor-advisory

CVSS Vector Radar Chart

7.8 / 10
Attack VectorLocalComplexityLowPrivilegesLowUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow privileges
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

Q
qualcomm logo
qualcomm

Weakness Type (CWE & CAPEC)

CWE-787

Similar Vulnerabilities

6.5
CVE-2020-3702Vulnerability in Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure And Networking
QI
Qualcomm, Inc. logo
VendorQualcomm, Inc.ProductSnapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking+27 etkilenen
Patch status unknownEPSS %06 y ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-27054"