CVE-2025-27059
Estado: AnalizadaAlta (8.8)—
Memory corruption while performing SCM call.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Puntuación base: 8.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.09%
- Percentil entre todas las CVEs puntuadas: 0
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
🎯 Técnicas ATT&CK
Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.
- Explotación
T1068Exploitation for Privilege Escalationprivilege escalation85 % - Impacto principal
T1059Command and Scripting Interpreterexecution75 % - Impacto secundario
T1098Account Manipulationpersistence · privilege escalation50 % - Impacto secundario
T1548Abuse Elevation Control Mechanismprivilege escalation60 %
AV:L/PR:L sin UI requiere acceso local autenticado (T1068). Memory corruption en SCM call permite ejecución de código, elevación de privilegios (CVSS C:H/I:H/A:H, S:C). Productos firmware Qualcomm afectados.
Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.
🛡️ Mitigaciones ATT&CK que cubren estas técnicas
Tecnologías afectadas (25)
Qualcomm — Immersive Home 214 Platform FirmwareQualcomm — Immersive Home 216 Platform FirmwareQualcomm — Immersive Home 316 Platform FirmwareQualcomm — Immersive Home 318 Platform FirmwareQualcomm — Ipq5010 FirmwareQualcomm — Ipq5028 FirmwareQualcomm — Qcn6023 FirmwareQualcomm — Qcn6024 FirmwareQualcomm — Qcn6100 FirmwareQualcomm — Qcn6102 FirmwareQualcomm — Qcn6112 FirmwareQualcomm — Qcn6122 FirmwareQualcomm — Qcn6132 FirmwareQualcomm — Qcn9000 FirmwareQualcomm — Qcn9001 FirmwareQualcomm — Qcn9002 FirmwareQualcomm — Qcn9003 FirmwareQualcomm — Qcn9012 FirmwareQualcomm — Qcn9022 FirmwareQualcomm — Qcn9024 FirmwareQualcomm — Qcn9070 FirmwareQualcomm — Qcn9072 FirmwareQualcomm — Qcn9074 FirmwareQualcomm — Qcn9100 FirmwareQualcomm — Qcn9274 Firmware
CWE
- CWE-823
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2025-27059",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2025-27059",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2025-10-10T03:55:16.114665Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "product-security@qualcomm.com",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 8.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 6,
"exploitabilityScore": 2
}
]
},
"affected": [
{
"source": "product-security@qualcomm.com",
"affectedData": [
{
"vendor": "Qualcomm, Inc.",
"product": "Snapdragon",
"versions": [
{
"status": "affected",
"version": "Immersive Home 214 Platform"
},
{
"status": "affected",
"version": "Immersive Home 216 Platform"
},
{
"status": "affected",
"version": "Immersive Home 316 Platform"
},
{
"status": "affected",
"version": "Immersive Home 318 Platform"
},
{
"status": "affected",
"version": "IPQ5010"
},
{
"status": "affected",
"version": "IPQ5028"
},
{
"status": "affected",
"version": "QCN6023"
},
{
"status": "affected",
"version": "QCN6024"
},
{
"status": "affected",
"version": "QCN6100"
},
{
"status": "affected",
"version": "QCN6102"
},
{
"status": "affected",
"version": "QCN6112"
},
{
"status": "affected",
"version": "QCN6122"
},
{
"status": "affected",
"version": "QCN6132"
},
{
"status": "affected",
"version": "QCN9000"
},
{
"status": "affected",
"version": "QCN9001"
},
{
"status": "affected",
"version": "QCN9002"
},
{
"status": "affected",
"version": "QCN9003"
},
{
"status": "affected",
"version": "QCN9012"
},
{
"status": "affected",
"version": "QCN9022"
},
{
"status": "affected",
"version": "QCN9024"
},
{
"status": "affected",
"version": "QCN9070"
},
{
"status": "affected",
"version": "QCN9072"
},
{
"status": "affected",
"version": "QCN9074"
},
{
"status": "affected",
"version": "QCN9100"
},
{
"status": "affected",
"version": "QCN9274"
}
],
"platforms": [
"Snapdragon Wired Infrastructure and Networking"
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2025-10-09T04:16:45.360",
"references": [
{
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html",
"tags": [
"Vendor Advisory"
],
"source": "product-security@qualcomm.com"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "product-security@qualcomm.com",
"description": [
{
"lang": "en",
"value": "CWE-823"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Memory corruption while performing SCM call."
},
{
"lang": "es",
"value": "Corrupción de memoria al realizar una llamada SCM."
}
],
"lastModified": "2026-09-30T23:10:00.237",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:immersive_home_214_platform_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C241123-63B1-4CA2-A3CB-BADA86EAAA2E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:immersive_home_214_platform:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "66E4B95D-966A-4940-A403-9E8241F121C2"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:immersive_home_216_platform_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "68309F58-91D9-407E-9578-17EAF6836E07"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:immersive_home_216_platform:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A0D491A9-6A1F-4B62-9A30-5A9F592BD5B5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:immersive_home_316_platform_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA6CA3E5-7A0F-4705-985E-0C25DE609494"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:immersive_home_316_platform:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8DC770BF-4B23-4F43-A0B9-E5FE41536F5E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:immersive_home_318_platform_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84B4531C-9D90-4A9B-8724-1428372319C8"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:immersive_home_318_platform:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "497EC79B-0879-4FA2-A5B7-63EA54FC20A5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:ipq5010_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8543C671-054B-489F-ACFE-B7D7BEC1DEE6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:ipq5010:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "15C5F8CB-3291-4E13-94F0-680FC85A9669"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:ipq5028_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5AE3085F-59BE-46A0-9A96-65CFAB7DFEAE"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:ipq5028:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "825524E0-BB01-4CAD-9F65-95E096467D28"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qcn6023_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63FF89C5-3BBF-4A13-8A3B-F490C2FA1A95"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qcn6023:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6784EC5F-2C26-49C5-9A03-6FD2056C04EF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qcn6024_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A49DBE04-E2EA-4DA1-B774-A878A71524AC"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qcn6024:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "69E98386-3BB2-4E8C-AD00-E05123608439"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qcn6100_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4730B8E7-C884-4AFA-ACB5-D0F39A993D18"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qcn6100:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "98CB565F-FE4A-4B52-96CB-AA769E985230"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qcn6102_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C37D96A3-0466-4FC4-9E56-35B55C3FA970"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qcn6102:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9D55BAB4-2AC5-419C-B405-C1AA022DAA24"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qcn6112_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6300827E-F6F0-490B-8043-38DD415E3161"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qcn6112:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "58F6B4C5-2C26-4A13-BA10-5B70805AD8B6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qcn6122_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A988BD3-71D8-4F2B-9EC2-8E385B114114"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qcn6122:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1E7049A3-9F35-465F-9B2E-96788E54EC63"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qcn6132_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A59FBBDC-0495-422C-B25A-FFDF94D33C34"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qcn6132:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F6E55C06-45EE-4144-8CBC-4D41DDE4D899"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qcn9000_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BCCFF8B-4857-439D-BD4A-EB35672F474B"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qcn9000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "86896D55-89F5-440B-9082-916E486B65D9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qcn9001_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E02C2FD8-3434-4407-99E3-EE1779C18117"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qcn9001:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AC3468C1-CF50-4ED2-BD91-D1D140653CFC"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qcn9002_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6694BAC2-6E3B-4589-8BEA-6B5219267D19"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qcn9002:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EF54E749-D512-45DE-841D-6199623C7099"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qcn9003_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6128C715-8085-47A8-9EE3-F8C67FC1236B"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qcn9003:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "73B9F6F0-2F3A-4A4E-91A1-39EE598E22A5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qcn9012_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61F34DD2-9DC0-49E5-BC85-1543EA199477"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qcn9012:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1A06879F-6FE9-448A-8186-8347D76F872B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qcn9022_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "36A10EB2-E7A2-461F-836E-FC38B9428C98"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qcn9022:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A457C1D6-A026-4B5F-9CB1-FA795785A515"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qcn9024_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A64CDA49-19BF-413F-A0E0-2B9729E45E25"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qcn9024:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "345CCD64-C09E-407D-AAA2-311C4CCFE24F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qcn9070_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C10CAAC-FD93-4116-9F0C-E983B3693FAF"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qcn9070:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9FEC2402-BA39-49BB-A34C-FF32ED44A158"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qcn9072_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "809FD84D-11C5-4EE3-B830-62CF5F6CB1BC"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qcn9072:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DFD77A52-D53C-424F-9E17-160B710469C3"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qcn9074_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "65303C2D-C6BF-47CB-8146-E240CB8BBE42"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qcn9074:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A6B03022-497A-4F42-BB4D-5624EA7DF1B9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qcn9100_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B31EEE9E-CDEC-4E88-B950-3413205E483E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qcn9100:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3E1E341A-7DDD-47E5-BB5F-0666482B41C0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qcn9274_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9129A244-AB8C-4AA4-BFBB-37F84D66BD3E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qcn9274:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "41F243A1-3C0B-4780-95BF-69A4E1A91F18"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "product-security@qualcomm.com"
}