Improper Input Validation in TZ Firmware

Summary

CVECVE-2025-27040
StatePUBLISHED
Assignerqualcomm
Source PriorityCVE Program / NVD first with legacy fallback
Published2025-10-09 04:16:35 UTC
Updated2026-10-08 13:10:00 UTC
DescriptionInformation disclosure may occur while processing the hypervisor log.

Risk And Classification

Primary CVSS: v3.1 6.5 MEDIUM from [email protected]

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS: 0.000850000 probability, percentile 0.002620000 (date 2026-10-08)

Problem Types: CWE-20 | CWE-20 CWE-20 Improper Input Validation


VersionSourceTypeScoreSeverityVector
3.1[email protected]Secondary6.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
3.1CNACVSS6.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CVSS v3.1 Breakdown

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
None
Availability
None

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Hardware Qualcomm Csr8811 - All All All
Operating System Qualcomm Csr8811 Firmware - All All All
Hardware Qualcomm Immersive Home 214 Platform - All All All
Operating System Qualcomm Immersive Home 214 Platform Firmware - All All All
Hardware Qualcomm Immersive Home 216 Platform - All All All
Operating System Qualcomm Immersive Home 216 Platform Firmware - All All All
Hardware Qualcomm Immersive Home 316 Platform - All All All
Operating System Qualcomm Immersive Home 316 Platform Firmware - All All All
Hardware Qualcomm Immersive Home 318 Platform - All All All
Operating System Qualcomm Immersive Home 318 Platform Firmware - All All All
Hardware Qualcomm Ipq5010 - All All All
Operating System Qualcomm Ipq5010 Firmware - All All All
Hardware Qualcomm Ipq5028 - All All All
Operating System Qualcomm Ipq5028 Firmware - All All All
Hardware Qualcomm Ipq8070 - All All All
Hardware Qualcomm Ipq8070a - All All All
Operating System Qualcomm Ipq8070a Firmware - All All All
Operating System Qualcomm Ipq8070 Firmware - All All All
Hardware Qualcomm Ipq8071 - All All All
Hardware Qualcomm Ipq8071a - All All All
Operating System Qualcomm Ipq8071a Firmware - All All All
Operating System Qualcomm Ipq8071 Firmware - All All All
Hardware Qualcomm Ipq8072 - All All All
Hardware Qualcomm Ipq8072a - All All All
Operating System Qualcomm Ipq8072a Firmware - All All All
Operating System Qualcomm Ipq8072 Firmware - All All All
Hardware Qualcomm Ipq8074 - All All All
Hardware Qualcomm Ipq8074a - All All All
Operating System Qualcomm Ipq8074a Firmware - All All All
Operating System Qualcomm Ipq8074 Firmware - All All All
Hardware Qualcomm Ipq8076 - All All All
Hardware Qualcomm Ipq8076a - All All All
Operating System Qualcomm Ipq8076a Firmware - All All All
Operating System Qualcomm Ipq8076 Firmware - All All All
Hardware Qualcomm Ipq8078 - All All All
Hardware Qualcomm Ipq8078a - All All All
Operating System Qualcomm Ipq8078a Firmware - All All All
Operating System Qualcomm Ipq8078 Firmware - All All All
Hardware Qualcomm Ipq8173 - All All All
Operating System Qualcomm Ipq8173 Firmware - All All All
Hardware Qualcomm Ipq8174 - All All All
Operating System Qualcomm Ipq8174 Firmware - All All All
Hardware Qualcomm Ipq9008 - All All All
Operating System Qualcomm Ipq9008 Firmware - All All All
Hardware Qualcomm Ipq9574 - All All All
Operating System Qualcomm Ipq9574 Firmware - All All All
Hardware Qualcomm Pmp8074 - All All All
Operating System Qualcomm Pmp8074 Firmware - All All All
Hardware Qualcomm Qca4024 - All All All
Operating System Qualcomm Qca4024 Firmware - All All All
Hardware Qualcomm Qca6428 - All All All
Operating System Qualcomm Qca6428 Firmware - All All All
Hardware Qualcomm Qca6438 - All All All
Operating System Qualcomm Qca6438 Firmware - All All All
Hardware Qualcomm Qca6694 - All All All
Operating System Qualcomm Qca6694 Firmware - All All All
Hardware Qualcomm Qca8072 - All All All
Operating System Qualcomm Qca8072 Firmware - All All All
Hardware Qualcomm Qca8075 - All All All
Operating System Qualcomm Qca8075 Firmware - All All All
Hardware Qualcomm Qca8081 - All All All
Operating System Qualcomm Qca8081 Firmware - All All All
Hardware Qualcomm Qca9888 - All All All
Operating System Qualcomm Qca9888 Firmware - All All All
Hardware Qualcomm Qca9889 - All All All
Operating System Qualcomm Qca9889 Firmware - All All All
Hardware Qualcomm Qca9984 - All All All
Operating System Qualcomm Qca9984 Firmware - All All All
Hardware Qualcomm Qcn5022 - All All All
Operating System Qualcomm Qcn5022 Firmware - All All All
Hardware Qualcomm Qcn5024 - All All All
Operating System Qualcomm Qcn5024 Firmware - All All All
Hardware Qualcomm Qcn5052 - All All All
Operating System Qualcomm Qcn5052 Firmware - All All All
Hardware Qualcomm Qcn5054 - All All All
Operating System Qualcomm Qcn5054 Firmware - All All All
Hardware Qualcomm Qcn5064 - All All All
Operating System Qualcomm Qcn5064 Firmware - All All All
Hardware Qualcomm Qcn5122 - All All All
Operating System Qualcomm Qcn5122 Firmware - All All All
Hardware Qualcomm Qcn5124 - All All All
Operating System Qualcomm Qcn5124 Firmware - All All All
Hardware Qualcomm Qcn5152 - All All All
Operating System Qualcomm Qcn5152 Firmware - All All All
Hardware Qualcomm Qcn5154 - All All All
Operating System Qualcomm Qcn5154 Firmware - All All All
Hardware Qualcomm Qcn5164 - All All All
Operating System Qualcomm Qcn5164 Firmware - All All All
Hardware Qualcomm Qcn5550 - All All All
Operating System Qualcomm Qcn5550 Firmware - All All All
Hardware Qualcomm Qcn6023 - All All All
Operating System Qualcomm Qcn6023 Firmware - All All All
Hardware Qualcomm Qcn6024 - All All All
Operating System Qualcomm Qcn6024 Firmware - All All All
Hardware Qualcomm Qcn6100 - All All All
Operating System Qualcomm Qcn6100 Firmware - All All All
Hardware Qualcomm Qcn6102 - All All All
Operating System Qualcomm Qcn6102 Firmware - All All All
Hardware Qualcomm Qcn6112 - All All All
Operating System Qualcomm Qcn6112 Firmware - All All All
Hardware Qualcomm Qcn6122 - All All All
Operating System Qualcomm Qcn6122 Firmware - All All All
Hardware Qualcomm Qcn6132 - All All All
Operating System Qualcomm Qcn6132 Firmware - All All All
Hardware Qualcomm Qcn9000 - All All All
Operating System Qualcomm Qcn9000 Firmware - All All All
Hardware Qualcomm Qcn9001 - All All All
Operating System Qualcomm Qcn9001 Firmware - All All All
Hardware Qualcomm Qcn9002 - All All All
Operating System Qualcomm Qcn9002 Firmware - All All All
Hardware Qualcomm Qcn9003 - All All All
Operating System Qualcomm Qcn9003 Firmware - All All All
Hardware Qualcomm Qcn9012 - All All All
Operating System Qualcomm Qcn9012 Firmware - All All All
Hardware Qualcomm Qcn9022 - All All All
Operating System Qualcomm Qcn9022 Firmware - All All All
Hardware Qualcomm Qcn9024 - All All All
Operating System Qualcomm Qcn9024 Firmware - All All All
Hardware Qualcomm Qcn9070 - All All All
Operating System Qualcomm Qcn9070 Firmware - All All All
Hardware Qualcomm Qcn9072 - All All All
Operating System Qualcomm Qcn9072 Firmware - All All All
Hardware Qualcomm Qcn9074 - All All All
Operating System Qualcomm Qcn9074 Firmware - All All All
Hardware Qualcomm Qcn9100 - All All All
Operating System Qualcomm Qcn9100 Firmware - All All All
Hardware Qualcomm Qcn9274 - All All All
Operating System Qualcomm Qcn9274 Firmware - All All All
Hardware Qualcomm Sdx55 - All All All
Operating System Qualcomm Sdx55 Firmware - All All All

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Qualcomm Inc. Snapdragon affected CSR8811 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected Immersive Home 214 Platform Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected Immersive Home 216 Platform Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected Immersive Home 316 Platform Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected Immersive Home 318 Platform Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected IPQ5010 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected IPQ5028 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected IPQ8070 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected IPQ8070A Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected IPQ8071 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected IPQ8071A Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected IPQ8072 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected IPQ8072A Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected IPQ8074 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected IPQ8074A Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected IPQ8076 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected IPQ8076A Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected IPQ8078 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected IPQ8078A Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected IPQ8173 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected IPQ8174 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected IPQ9008 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected IPQ9574 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected PMP8074 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCA4024 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCA6428 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCA6438 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCA6694 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCA8072 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCA8075 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCA8081 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCA9888 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCA9889 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCA9984 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN5022 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN5024 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN5052 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN5054 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN5064 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN5122 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN5124 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN5152 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN5154 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN5164 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN5550 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN6023 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN6024 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN6100 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN6102 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN6112 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN6122 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN6132 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN9000 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN9001 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN9002 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN9003 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN9012 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN9022 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN9024 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN9070 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN9072 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN9074 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN9100 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected QCN9274 Snapdragon Wired Infrastructure and Networking
CNA Qualcomm Inc. Snapdragon affected SDX55 Snapdragon Wired Infrastructure and Networking

References

ReferenceSourceLinkTags
docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulleti... [email protected] docs.qualcomm.com Vendor Advisory
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report