CVE-2025-27059: Use of Out-of-range Pointer Offset in TZ Firmware
Published Oct 9, 2025
·Updated
Memory corruption while performing SCM call.
Affected Software
50 affected components
All of the following
Qualcomm Immersive Home 214 Platform Firmware
Qualcomm Immersive Home 214 Platform
All of the following
Qualcomm Immersive Home 216 Platform Firmware
Qualcomm Immersive Home 216 Platform
All of the following
Qualcomm Immersive Home 316 Platform Firmware
Qualcomm Immersive Home 316 Platform
All of the following
Qualcomm Immersive Home 318 Platform Firmware
Qualcomm Immersive Home 318 Platform
All of the following
Qualcomm Ipq5010 Firmware
Qualcomm Ipq5010
All of the following
Qualcomm Ipq5028 Firmware
Qualcomm Ipq5028
All of the following
Qualcomm Qcn6023 Firmware
Qualcomm Qcn6023
All of the following
Qualcomm Qcn6024 Firmware
Qualcomm Qcn6024
All of the following
Qualcomm Qcn6100 Firmware
Qualcomm Qcn6100
All of the following
Qualcomm Qcn6102 Firmware
Qualcomm Qcn6102
All of the following
Qualcomm Qcn6112 Firmware
Qualcomm Qcn6112
All of the following
Qualcomm Qcn6122 Firmware
Qualcomm Qcn6122
All of the following
Qualcomm Qcn6132 Firmware
Qualcomm Qcn6132
All of the following
Qualcomm Qcn9000 Firmware
Qualcomm Qcn9000
All of the following
Qualcomm Qcn9001 Firmware
Qualcomm Qcn9001
All of the following
Qualcomm Qcn9002 Firmware
Qualcomm Qcn9002
All of the following
Qualcomm Qcn9003 Firmware
Qualcomm Qcn9003
All of the following
Qualcomm Qcn9012 Firmware
Qualcomm Qcn9012
All of the following
Qualcomm Qcn9022 Firmware
Qualcomm Qcn9022
All of the following
Qualcomm Qcn9024 Firmware
Qualcomm Qcn9024
All of the following
Qualcomm Qcn9070 Firmware
Qualcomm Qcn9070
All of the following
Qualcomm Qcn9072 Firmware
Qualcomm Qcn9072
All of the following
Qualcomm Qcn9074 Firmware
Qualcomm Qcn9074
All of the following
Qualcomm Qcn9100 Firmware
Qualcomm Qcn9100
All of the following
Qualcomm Qcn9274 Firmware
Qualcomm Qcn9274
Event History
Oct 9, 2025
CVE Published
via MITRE·03:18 AM
Data Sourced
via MITRE·03:18 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-27059?
CVE-2025-27059 is categorized as a high-severity vulnerability due to potential exploitation leading to memory corruption.
2
How do I fix CVE-2025-27059?
To fix CVE-2025-27059, users should update to the latest firmware provided by Qualcomm for their affected devices.
3
What systems are affected by CVE-2025-27059?
CVE-2025-27059 affects Qualcomm Immersive Home platform firmware across multiple models including 214, 216, 316, 318, and various QCN series devices.
4
What type of vulnerability is CVE-2025-27059?
CVE-2025-27059 is a memory corruption vulnerability that occurs during SCM calls on affected Qualcomm devices.
5
Can CVE-2025-27059 be exploited remotely?
Yes, CVE-2025-27059 has the potential to be exploited remotely, which could allow unauthorized access or control over affected devices.