CVE-2025-27036 (CNNVD-202509-3846)

MEDIUM
中文标题:
Qualcomm Chipsets 安全漏洞
英文标题:
Buffer Over-read in Video
CVSS分数: 6.1
发布时间: 2025-09-24 15:33:42
漏洞类型: 其他
状态: PUBLISHED
数据质量分数: 0.30
数据版本: v3
漏洞描述
中文描述:

Qualcomm Chipsets是美国高通（Qualcomm）公司的一系列芯片组。 Qualcomm Chipsets存在安全漏洞，该漏洞源于视频引擎转义输入数据小于预期最小尺寸，可能导致信息泄露。

英文描述:

Information disclosure when Video engine escape input data is less than expected minimum size.

CWE类型:
CWE-126
标签:
（暂无数据）
受影响产品
厂商 产品 版本 版本范围 平台 CPE
Qualcomm, Inc. Snapdragon FastConnect 6700 - - cpe:2.3:a:qualcomm,_inc.:snapdragon:fastconnect_6700:*:*:*:*:*:*:*
Qualcomm, Inc. Snapdragon FastConnect 6900 - - cpe:2.3:a:qualcomm,_inc.:snapdragon:fastconnect_6900:*:*:*:*:*:*:*
Qualcomm, Inc. Snapdragon FastConnect 7800 - - cpe:2.3:a:qualcomm,_inc.:snapdragon:fastconnect_7800:*:*:*:*:*:*:*
Qualcomm, Inc. Snapdragon QCM5430 - - cpe:2.3:a:qualcomm,_inc.:snapdragon:qcm5430:*:*:*:*:*:*:*
Qualcomm, Inc. Snapdragon QCM6490 - - cpe:2.3:a:qualcomm,_inc.:snapdragon:qcm6490:*:*:*:*:*:*:*
Qualcomm, Inc. Snapdragon QCS5430 - - cpe:2.3:a:qualcomm,_inc.:snapdragon:qcs5430:*:*:*:*:*:*:*
Qualcomm, Inc. Snapdragon QCS6490 - - cpe:2.3:a:qualcomm,_inc.:snapdragon:qcs6490:*:*:*:*:*:*:*
Qualcomm, Inc. Snapdragon Qualcomm Video Collaboration VC3 Platform - - cpe:2.3:a:qualcomm,_inc.:snapdragon:qualcomm_video_collaboration_vc3_platform:*:*:*:*:*:*:*
Qualcomm, Inc. Snapdragon SC8380XP - - cpe:2.3:a:qualcomm,_inc.:snapdragon:sc8380xp:*:*:*:*:*:*:*
Qualcomm, Inc. Snapdragon Snapdragon 7c+ Gen 3 Compute - - cpe:2.3:a:qualcomm,_inc.:snapdragon:snapdragon_7c+_gen_3_compute:*:*:*:*:*:*:*
Qualcomm, Inc. Snapdragon Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB) - - cpe:2.3:a:qualcomm,_inc.:snapdragon:snapdragon_8cx_gen_3_compute_platform_(sc8280xp-ab,_bb):*:*:*:*:*:*:*
Qualcomm, Inc. Snapdragon WCD9370 - - cpe:2.3:a:qualcomm,_inc.:snapdragon:wcd9370:*:*:*:*:*:*:*
Qualcomm, Inc. Snapdragon WCD9375 - - cpe:2.3:a:qualcomm,_inc.:snapdragon:wcd9375:*:*:*:*:*:*:*
Qualcomm, Inc. Snapdragon WCD9380 - - cpe:2.3:a:qualcomm,_inc.:snapdragon:wcd9380:*:*:*:*:*:*:*
Qualcomm, Inc. Snapdragon WCD9385 - - cpe:2.3:a:qualcomm,_inc.:snapdragon:wcd9385:*:*:*:*:*:*:*
Qualcomm, Inc. Snapdragon WSA8830 - - cpe:2.3:a:qualcomm,_inc.:snapdragon:wsa8830:*:*:*:*:*:*:*
Qualcomm, Inc. Snapdragon WSA8835 - - cpe:2.3:a:qualcomm,_inc.:snapdragon:wsa8835:*:*:*:*:*:*:*
Qualcomm, Inc. Snapdragon WSA8840 - - cpe:2.3:a:qualcomm,_inc.:snapdragon:wsa8840:*:*:*:*:*:*:*
Qualcomm, Inc. Snapdragon WSA8845 - - cpe:2.3:a:qualcomm,_inc.:snapdragon:wsa8845:*:*:*:*:*:*:*
Qualcomm, Inc. Snapdragon WSA8845H - - cpe:2.3:a:qualcomm,_inc.:snapdragon:wsa8845h:*:*:*:*:*:*:*
qualcomm fastconnect_6700_firmware - - - cpe:2.3:o:qualcomm:fastconnect_6700_firmware:-:*:*:*:*:*:*:*
qualcomm fastconnect_6900_firmware - - - cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*
qualcomm fastconnect_7800_firmware - - - cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*
qualcomm qcm5430_firmware - - - cpe:2.3:o:qualcomm:qcm5430_firmware:-:*:*:*:*:*:*:*
qualcomm qcm6490_firmware - - - cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*
qualcomm qcs5430_firmware - - - cpe:2.3:o:qualcomm:qcs5430_firmware:-:*:*:*:*:*:*:*
qualcomm qcs6490_firmware - - - cpe:2.3:o:qualcomm:qcs6490_firmware:-:*:*:*:*:*:*:*
qualcomm video_collaboration_vc3_platform_firmware - - - cpe:2.3:o:qualcomm:video_collaboration_vc3_platform_firmware:-:*:*:*:*:*:*:*
qualcomm sc8380xp_firmware - - - cpe:2.3:o:qualcomm:sc8380xp_firmware:-:*:*:*:*:*:*:*
qualcomm snapdragon_7c\+_gen_3_compute_firmware - - - cpe:2.3:o:qualcomm:snapdragon_7c\+_gen_3_compute_firmware:-:*:*:*:*:*:*:*
qualcomm snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\)_firmware - - - cpe:2.3:o:qualcomm:snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\)_firmware:-:*:*:*:*:*:*:*
qualcomm snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\)_firmware - - - cpe:2.3:o:qualcomm:snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\)_firmware:-:*:*:*:*:*:*:*
qualcomm wcd9370_firmware - - - cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*
qualcomm wcd9375_firmware - - - cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*
qualcomm wcd9380_firmware - - - cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
qualcomm wcd9385_firmware - - - cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*
qualcomm wsa8830_firmware - - - cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
qualcomm wsa8835_firmware - - - cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
qualcomm wsa8840_firmware - - - cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*
qualcomm wsa8845_firmware - - - cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*
qualcomm wsa8845h_firmware - - - cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*
解决方案
中文解决方案:
（暂无数据）
英文解决方案:
（暂无数据）
临时解决方案:
（暂无数据）
参考链接
无标题 OTHER
cve.org
访问
CVSS评分详情
3.1 (cna)
MEDIUM
6.1
CVSS向量: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
机密性
HIGH
完整性
NONE
可用性
LOW
时间信息
发布时间:
2025-09-24 15:33:42
修改时间:
2025-09-25 13:51:30
创建时间:
2025-11-11 15:40:18
更新时间:
2025-11-11 16:00:13
利用信息
暂无可利用代码信息
数据源详情
数据源 记录ID 版本 提取时间
CVE cve_CVE-2025-27036 2025-11-11 15:23:11 2025-11-11 07:40:18
NVD nvd_CVE-2025-27036 2025-11-11 15:01:04 2025-11-11 07:48:08
CNNVD cnnvd_CNNVD-202509-3846 2025-11-11 15:12:58 2025-11-11 08:00:13
版本与语言
当前版本: v3
主要语言: EN
支持语言:
EN ZH
安全公告
暂无安全公告信息
变更历史
v3 CNNVD
2025-11-11 16:00:13
vulnerability_type: 未提取 → 其他; cnnvd_id: 未提取 → CNNVD-202509-3846; data_sources: ['cve', 'nvd'] → ['cnnvd', 'cve', 'nvd']
查看详细变更
  • vulnerability_type: 未提取 -> 其他
  • cnnvd_id: 未提取 -> CNNVD-202509-3846
  • data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
v2 NVD
2025-11-11 15:48:08
affected_products_count: 20 → 41; data_sources: ['cve'] → ['cve', 'nvd']
查看详细变更
  • affected_products_count: 20 -> 41
  • data_sources: ['cve'] -> ['cve', 'nvd']