CVE-2025-27060: Untrusted Pointer Dereference in TZ Firmware
Published Oct 9, 2025
·Updated
Memory corruption while performing SCM call with malformed inputs.
Affected Software
50 affected components
All of the following
Qualcomm Immersive Home 214 Platform Firmware
Qualcomm Immersive Home 214 Platform
All of the following
Qualcomm Immersive Home 216 Platform Firmware
Qualcomm Immersive Home 216 Platform
All of the following
Qualcomm Immersive Home 316 Platform Firmware
Qualcomm Immersive Home 316 Platform
All of the following
Qualcomm Immersive Home 318 Platform Firmware
Qualcomm Immersive Home 318 Platform
All of the following
Qualcomm Ipq5010 Firmware
Qualcomm Ipq5010
All of the following
Qualcomm Ipq5028 Firmware
Qualcomm Ipq5028
All of the following
Qualcomm Qcn6023 Firmware
Qualcomm Qcn6023
All of the following
Qualcomm Qcn6024 Firmware
Qualcomm Qcn6024
All of the following
Qualcomm Qcn6100 Firmware
Qualcomm Qcn6100
All of the following
Qualcomm Qcn6102 Firmware
Qualcomm Qcn6102
All of the following
Qualcomm Qcn6112 Firmware
Qualcomm Qcn6112
All of the following
Qualcomm Qcn6122 Firmware
Qualcomm Qcn6122
All of the following
Qualcomm Qcn6132 Firmware
Qualcomm Qcn6132
All of the following
Qualcomm Qcn9000 Firmware
Qualcomm Qcn9000
All of the following
Qualcomm Qcn9001 Firmware
Qualcomm Qcn9001
All of the following
Qualcomm Qcn9002 Firmware
Qualcomm Qcn9002
All of the following
Qualcomm Qcn9003 Firmware
Qualcomm Qcn9003
All of the following
Qualcomm Qcn9012 Firmware
Qualcomm Qcn9012
All of the following
Qualcomm Qcn9022 Firmware
Qualcomm Qcn9022
All of the following
Qualcomm Qcn9024 Firmware
Qualcomm Qcn9024
All of the following
Qualcomm Qcn9070 Firmware
Qualcomm Qcn9070
All of the following
Qualcomm Qcn9072 Firmware
Qualcomm Qcn9072
All of the following
Qualcomm Qcn9074 Firmware
Qualcomm Qcn9074
All of the following
Qualcomm Qcn9100 Firmware
Qualcomm Qcn9100
All of the following
Qualcomm Qcn9274 Firmware
Qualcomm Qcn9274
Event History
Oct 9, 2025
CVE Published
via MITRE·03:18 AM
Data Sourced
via MITRE·03:18 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-27060?
CVE-2025-27060 is categorized as a memory corruption vulnerability which can lead to potential exploitation.
2
How do I fix CVE-2025-27060?
To fix CVE-2025-27060, users need to update their Qualcomm Immersive Home or associated platform firmware to the latest version.
3
What software is affected by CVE-2025-27060?
CVE-2025-27060 affects multiple Qualcomm Immersive Home platform firmware versions including the 214, 216, 316, and others as listed.
4
What are the consequences of CVE-2025-27060?
Exploitation of CVE-2025-27060 can potentially lead to system instability or unauthorized access.
5
Is CVE-2025-27060 easily exploitable?
The exploitability of CVE-2025-27060 depends on the attacker's capability to craft specific malformed inputs.