Back to the CVE list
CVE-2025-27060

Vulnerability in Qualcomm Immersive Home 214 Platform Firmware

CVSS score

8.8

EPSS probability

%0.1

Risk score

0.0

Published

1 y ago

Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2025-27060 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Memory corruption while performing SCM call with malformed inputs.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2025-27060 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1qualcommimmersive home 214 platform firmware View
2qualcommimmersive home 214 platform View
3qualcommimmersive home 216 platform firmware View
4qualcommimmersive home 216 platform View
5qualcommimmersive home 316 platform firmware View
6qualcommimmersive home 316 platform View
7qualcommimmersive home 318 platform firmware View
8qualcommimmersive home 318 platform View
9qualcommipq5010 firmware View
10qualcommipq5010 View
11qualcommipq5028 firmware View
12qualcommipq5028 View
13qualcommqcn6023 firmware View
14qualcommqcn6023 View
15qualcommqcn6024 firmware View
16qualcommqcn6024 View
17qualcommqcn6100 firmware View
18qualcommqcn6100 View
19qualcommqcn6102 firmware View
20qualcommqcn6102 View
21qualcommqcn6112 firmware View
22qualcommqcn6112 View
23qualcommqcn6122 firmware View
24qualcommqcn6122 View
25qualcommqcn6132 firmware View
26qualcommqcn6132 View
27qualcommqcn9000 firmware View
28qualcommqcn9000 View
29qualcommqcn9001 firmware View
30qualcommqcn9001 View
31qualcommqcn9002 firmware View
32qualcommqcn9002 View
33qualcommqcn9003 firmware View
34qualcommqcn9003 View
35qualcommqcn9012 firmware View
36qualcommqcn9012 View
37qualcommqcn9022 firmware View
38qualcommqcn9022 View
39qualcommqcn9024 firmware View
40qualcommqcn9024 View
41qualcommqcn9070 firmware View
42qualcommqcn9070 View
43qualcommqcn9072 firmware View
44qualcommqcn9072 View
45qualcommqcn9074 firmware View
46qualcommqcn9074 View
47qualcommqcn9100 firmware View
48qualcommqcn9100 View
49qualcommqcn9274 firmware View
50qualcommqcn9274 View
Total affected vendors: 1|Products: 50

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
8.8CVSS V31HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-27060 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-27060 weaknesses.

Attack Vector and Accessibility

ExposureYerel erişim
PermissionsLow
UserGerekmiyor

Official Sources and Advisories

CVSS Vector Radar Chart

8.8 / 10
Attack VectorLocalComplexityLowPrivilegesLowUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow privileges
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

Q
qualcomm logo
qualcomm

Weakness Type (CWE & CAPEC)

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-27060"