CVE-2025-27064
Buffer Over-read in Core Services
Information disclosure while registering commands from clients with diag through diagHal.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Buffer Over-read in Core Services
Information disclosure while registering commands from clients with diag through diagHal.
- Record
CVE-2025-27064- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L - Weakness
- CWE-126
- Updated
- 2026-11-02
EUVDEUVD-2025-37617
Information disclosure while registering commands from clients with diag through diagHal.
- Record
EUVD-2025-37617- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-8pw2-chg7-6hcp
Information disclosure while registering commands from clients with diag through diagHal.
Information disclosure while registering commands from clients with diag through diagHal.
- Record
GHSA-8pw2-chg7-6hcp- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L - Weakness
- CWE-126
- Updated
- 2026-11-02
NVD
Information disclosure while registering commands from clients with diag through diagHal.
- Record
CVE-2025-27064- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L - Weakness
- CWE-126
- Updated
- 2026-11-02
Affected products
- qualcomm fastconnect 6900 firmware
- qualcomm fastconnect 7800 firmware
- qualcomm immersive home 3210 platform firmware
- qualcomm immersive home 326 platform firmware
- qualcomm ipq5300 firmware
- qualcomm ipq5302 firmware
- qualcomm ipq5312 firmware
- qualcomm ipq5332 firmware
- qualcomm ipq5424 firmware
- qualcomm ipq9008 firmware
- qualcomm ipq9048 firmware
- qualcomm ipq9554 firmware
Show 66 moreShow less
- qualcomm ipq9570 firmware
- qualcomm ipq9574 firmware
- qualcomm mdm9628 firmware
- qualcomm qam8255p firmware
- qualcomm qam8650p firmware
- qualcomm qca0000 firmware
- qualcomm qca6564a firmware
- qualcomm qca6564au firmware
- qualcomm qca6574a firmware
- qualcomm qca6574au firmware
- qualcomm qca6584au firmware
- qualcomm qca6595au firmware
- qualcomm qca6678aq firmware
- qualcomm qca6688aq firmware
- qualcomm qca6698aq firmware
- qualcomm qca8075 firmware
- qualcomm qca8080 firmware
- qualcomm qca8081 firmware
- qualcomm qca8082 firmware
- qualcomm qca8084 firmware
- qualcomm qca8085 firmware
- qualcomm qca8101 firmware
- qualcomm qca8102 firmware
- qualcomm qca8111 firmware
- qualcomm qca8112 firmware
- qualcomm qca8384 firmware
- qualcomm qca8385 firmware
- qualcomm qca8386 firmware
- qualcomm qca9367 firmware
- qualcomm qca9377 firmware
- qualcomm qcf8000 firmware
- qualcomm qcf8001 firmware
- qualcomm qcn5124 firmware
- qualcomm qcn5224 firmware
- qualcomm qcn6402 firmware
- qualcomm qcn6412 firmware
- qualcomm qcn6422 firmware
- qualcomm qcn6432 firmware
- qualcomm qcn9000 firmware
- qualcomm qcn9012 firmware
- qualcomm qcn9024 firmware
- qualcomm qcn9074 firmware
- qualcomm qcn9160 firmware
- qualcomm qcn9274 firmware
- qualcomm qxm8083 firmware
- qualcomm sa4150p firmware
- qualcomm sa4155p firmware
- qualcomm sa6155p firmware
- qualcomm sa7255p firmware
- qualcomm sa8155p firmware
- qualcomm sa8195p firmware
- qualcomm sa8255p firmware
- qualcomm sa8530p firmware
- qualcomm sa8540p firmware
- qualcomm sa8650p firmware
- qualcomm sa9000p firmware
- qualcomm snapdragon 8 gen 1 mobile platform firmware
- qualcomm snapdragon auto 5g modem-rf gen 2 firmware
- qualcomm sxr2250p firmware
- qualcomm wcd9380 firmware
- qualcomm wcn3660b firmware
- qualcomm wcn3680b firmware
- qualcomm wcn3980 firmware
- qualcomm wsa8830 firmware
- qualcomm wsa8835 firmware
- qualcomm, inc. snapdragon
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-27064 is a medium vulnerability (CVSS 6.1) in Qualcomm Fastconnect 6900 Firmware, published November 4, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.08%, the 0th percentile. No source names a fixed version.