CVE-2025-27042: Incorrect Calculation of Buffer Size in Video
Memory corruption while processing video packets received from video firmware.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2025-09-05
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27042?
CVE-2025-27042 is rated as critical due to its potential to allow remote attackers to exploit memory corruption issues.
How do I fix CVE-2025-27042?
To fix CVE-2025-27042, it is recommended to update the affected Qualcomm firmware to the latest version provided by Qualcomm.
What types of devices are affected by CVE-2025-27042?
CVE-2025-27042 affects various Qualcomm modem firmware versions across multiple device models.
What are the potential exploitations of CVE-2025-27042?
The vulnerability allows attackers to execute arbitrary code or cause a denial-of-service condition by sending specially crafted video packets to the firmware.
Is there a workaround for CVE-2025-27042?
Currently, the best mitigation for CVE-2025-27042 is applying the firmware updates, as workarounds may not fully eliminate the risk.