MEDIUM · 6.1

CVE-2025-27030

information disclosure while invoking calibration data from user space to update firmware size.

Vulnerability Description

information disclosure while invoking calibration data from user space to update firmware size.

CVSS Score

6.1

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
LOW

Affected Products

VendorProductVersions
QualcommC-V2X 9150 Firmware-
QualcommC-V2X 9150-
QualcommQam8295P Firmware-
QualcommQam8295P-
QualcommQca6574Au Firmware-
QualcommQca6574Au-
QualcommQca6584Au Firmware-
QualcommQca6584Au-
QualcommQca6696 Firmware-
QualcommQca6696-
QualcommQca6698Aq Firmware-
QualcommQca6698Aq-
QualcommQca9367 Firmware-
QualcommQca9367-
QualcommQca9377 Firmware-
QualcommQca9377-
QualcommQcn9074 Firmware-
QualcommQcn9074-
QualcommQcs410 Firmware-
QualcommQcs410-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2025-27030?

CVE-2025-27030 is a vulnerability with a CVSS score of 6.1 (MEDIUM). information disclosure while invoking calibration data from user space to update firmware size.

How severe is CVE-2025-27030?

CVE-2025-27030 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-27030?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm C-V2X 9150 Firmware, Qualcomm C-V2X 9150, Qualcomm Qam8295P Firmware, Qualcomm Qam8295P, Qualcomm Qca6574Au Firmware.