CVE-2025-27043: Buffer Copy Without Checking Size of Input in Video
Memory corruption while processing manipulated payload in video firmware.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2025-09-05
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27043?
CVE-2025-27043 has a critical severity due to the potential for memory corruption that can lead to arbitrary code execution.
How do I fix CVE-2025-27043?
To fix CVE-2025-27043, update the affected Qualcomm firmware to the latest version provided by Qualcomm.
What are the consequences of exploiting CVE-2025-27043?
Exploiting CVE-2025-27043 could allow an attacker to execute arbitrary code, potentially compromising the affected devices.
Which devices are impacted by CVE-2025-27043?
CVE-2025-27043 affects various Qualcomm firmware, including those used in devices like the Snapdragon series.
Is there a workaround for CVE-2025-27043 until a patch is applied?
Currently, there are no known effective workarounds for CVE-2025-27043; the recommended action is to apply the firmware update as soon as it is available.