We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2025-27031

Use After Free in Bluetooth HOST



Description

memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed.

Reserved 2025-02-18 | Published 2025-06-03 | Updated 2025-06-03 | Assigner qualcomm


HIGH: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-416 Use After Free

Product status

Default status
unaffected

FastConnect 6700
affected

FastConnect 6900
affected

FastConnect 7800
affected

QCM5430
affected

QCM6490
affected

QCS5430
affected

QCS6490
affected

Qualcomm Video Collaboration VC3 Platform
affected

SC8380XP
affected

Snapdragon 7c+ Gen 3 Compute
affected

Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB)
affected

WCD9370
affected

WCD9375
affected

WCD9380
affected

WCD9385
affected

WSA8830
affected

WSA8835
affected

WSA8840
affected

WSA8845
affected

WSA8845H
affected

References

docs.qualcomm.com/...ecuritybulletin/june-2025-bulletin.html

cve.org (CVE-2025-27031)

nvd.nist.gov (CVE-2025-27031)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2025-27031

Support options

Helpdesk Chat, Email, Knowledgebase
© Copyright 2025 THREATINT
Made in Cyprus with ❤ + ☼
 System status
Find us on
Data Privacy
Terms of Use
Logo BSI Allianz für Cyber-Sicherheit
Error loading Crisp.chat. Please check your web content filter and browser plugins.