Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-27060

Untrusted Pointer Dereference in TZ Firmware

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
qualcomm

Description

Memory corruption while performing SCM call with malformed inputs.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qualcomm, Inc. Snapdragon

Default version status: unaffected

  • Immersive Home 214 Platformaffected
  • Immersive Home 216 Platformaffected
  • Immersive Home 316 Platformaffected
  • Immersive Home 318 Platformaffected
  • IPQ5010affected
  • IPQ5028affected
  • QCN6023affected
  • QCN6024affected
  • QCN6100affected
  • QCN6102affected
  • QCN6112affected
  • QCN6122affected
  • QCN6132affected
  • QCN9000affected
  • QCN9001affected
  • QCN9002affected
  • QCN9003affected
  • QCN9012affected
  • QCN9022affected
  • QCN9024affected
  • QCN9070affected
  • QCN9072affected
  • QCN9074affected
  • QCN9100affected
  • QCN9274affected

References