CVE-2025-27049: Buffer Over-read in Camera

Published Oct 9, 2025
·
Updated

Transient DOS while processing IOCTL call for image encoding.

Affected Software

62 affected components
All of the following
Qualcomm Fastconnect 6700 Firmware
Qualcomm Fastconnect 6700
All of the following
Qualcomm Fastconnect 6900 Firmware
Qualcomm Fastconnect 6900
All of the following
Qualcomm Fastconnect 7800 Firmware
Qualcomm Fastconnect 7800
All of the following
Qualcomm Qcc2072 Firmware
Qualcomm Qcc2072
All of the following
Qualcomm Qcm5430 Firmware
Qualcomm Qcm5430
All of the following
Qualcomm Qcm6490 Firmware
Qualcomm Qcm6490
All of the following
Qualcomm Qcs5430 Firmware
Qualcomm Qcs5430
All of the following
Qualcomm Qcs6490 Firmware
Qualcomm Qcs6490
All of the following
Qualcomm Video Collaboration Vc3 Platform Firmware
Qualcomm Video Collaboration Vc3 Platform
All of the following
Qualcomm Sc8380xp Firmware
Qualcomm Sc8380xp
All of the following
Qualcomm Snapdragon 7c\+ Gen 3 Compute Firmware
Qualcomm Snapdragon 7c\+ Gen 3 Compute
All of the following
Qualcomm Snapdragon 8cx Gen 3 Compute Platform \(sc8280xp-ab\) Firmware
Qualcomm Snapdragon 8cx Gen 3 Compute Platform \(sc8280xp-ab\)
All of the following
Qualcomm Snapdragon 8cx Gen 3 Compute Platform \(sc8280xp-bb\) Firmware
Qualcomm Snapdragon 8cx Gen 3 Compute Platform \(sc8280xp-bb\)
All of the following
Qualcomm Wcd9370 Firmware
Qualcomm Wcd9370
All of the following
Qualcomm Wcd9375 Firmware
Qualcomm Wcd9375
All of the following
Qualcomm Wcd9378c Firmware
Qualcomm Wcd9378c
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
All of the following
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
All of the following
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
All of the following
Qualcomm Wsa8840 Firmware
Qualcomm Wsa8840
All of the following
Qualcomm Wsa8845 Firmware
Qualcomm Wsa8845
All of the following
Qualcomm Wsa8845h Firmware
Qualcomm Wsa8845h
All of the following
Qualcomm X2000077 Firmware
Qualcomm X2000077
All of the following
Qualcomm X2000086 Firmware
Qualcomm X2000086
All of the following
Qualcomm X2000090 Firmware
Qualcomm X2000090
All of the following
Qualcomm X2000092 Firmware
Qualcomm X2000092
All of the following
Qualcomm X2000094 Firmware
Qualcomm X2000094
All of the following
Qualcomm Xg101002 Firmware
Qualcomm Xg101002
All of the following
Qualcomm Xg101032 Firmware
Qualcomm Xg101032
All of the following
Qualcomm Xg101039 Firmware
Qualcomm Xg101039

Event History

Oct 9, 2025
CVE Published
via MITRE·03:17 AM
Data Sourced
via MITRE·03:17 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 AM
DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2025-27049?

CVE-2025-27049 has been classified with a severity rating that suggests it can lead to a transient denial of service during the processing of IOCTL calls.

2

How do I fix CVE-2025-27049?

To fix CVE-2025-27049, it is recommended to update the affected Qualcomm firmware to the latest version as outlined in the October 2025 security bulletin.

3

Which devices are affected by CVE-2025-27049?

CVE-2025-27049 affects various Qualcomm firmware versions, including those for the Fastconnect 6700, Fastconnect 6900, and others as listed in the vulnerability details.

4

Is CVE-2025-27049 actively exploited in the wild?

As of now, there is no public indication that CVE-2025-27049 is actively exploited in the wild, but it is advisable to apply updates to mitigate potential risks.

5

What types of attacks does CVE-2025-27049 enable?

CVE-2025-27049 could enable a denial of service attack during the handling of image encoding through IOCTL calls, impacting system availability.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203