CVE-2025-27054 — HIGH (7.8)

Vulnerability Description

Memory corruption while processing a malformed license file during reboot.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Qualcomm	315 5G Iot Modem Firmware	-
Qualcomm	315 5G Iot Modem	-
Qualcomm	9205 Lte Modem Firmware	-
Qualcomm	9205 Lte Modem	-
Qualcomm	Aqt1000 Firmware	-
Qualcomm	Aqt1000	-
Qualcomm	Ar8031 Firmware	-
Qualcomm	Ar8031	-
Qualcomm	Ar8035 Firmware	-
Qualcomm	Ar8035	-
Qualcomm	Sa8770P Firmware	-
Qualcomm	Sa8770P	-
Qualcomm	Sa8775P Firmware	-
Qualcomm	Sa8775P	-
Qualcomm	Sa9000P Firmware	-
Qualcomm	Sa9000P	-
Qualcomm	Sc8180X\+Sdx55 Firmware	-
Qualcomm	Sc8180X\+Sdx55	-
Qualcomm	Sc8380Xp Firmware	-
Qualcomm	Sc8380Xp	-

Related Weaknesses (CWE)

CWE-787

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-Vendor Advisory

FAQ

What is CVE-2025-27054?

CVE-2025-27054 is a vulnerability with a CVSS score of 7.8 (HIGH). Memory corruption while processing a malformed license file during reboot.

How severe is CVE-2025-27054?

CVE-2025-27054 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-27054?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm 315 5G Iot Modem Firmware, Qualcomm 315 5G Iot Modem, Qualcomm 9205 Lte Modem Firmware, Qualcomm 9205 Lte Modem, Qualcomm Aqt1000 Firmware.