What is the CVSS score of CVE-2025-27036?

CVE-2025-27036 has a CVSS 3.1 base score of 6.1 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L. EPSS exploitation probability: 0.0%.

Which versions of Fastconnect 6700 Firmware are affected by CVE-2025-27036?

Organizations using Information disclosure when Video engine escape input data should be aware of moderate risk from CVE-2025-27036 rated CVSS 6.1.

How to fix or mitigate CVE-2025-27036?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Fastconnect 6700 Firmware CVE-2025-27036

MEDIUM

Buffer Over-read (CWE-126)

2025-09-24 product-security@qualcomm.com

Buffer Overflow Information Disclosure Fastconnect 6700 Firmware Fastconnect 6900 Firmware Fastconnect 7800 Firmware Qcm5430 Firmware Qcm6490 Firmware Qcs5430 Firmware Qcs6490 Firmware Sc8380xp Firmware Video Collaboration Vc3 Platform Firmware Wcd9370 Firmware Wcd9375 Firmware Wcd9380 Firmware Wcd9385 Firmware Wsa8830 Firmware Wsa8835 Firmware Wsa8840 Firmware Wsa8845 Firmware Wsa8845h Firmware Snapdragon 8Cx Gen 3 Compute Platform Sc8280Xp Ab Firmware Snapdragon 8Cx Gen 3 Compute Platform Sc8280Xp Bb Firmware Snapdragon 7C Gen 3 Compute Firmware

6.1

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 19:14 vuln.today

CVE Published

Sep 24, 2025 - 16:15 nvd

MEDIUM 6.1

DescriptionNVD

Information disclosure when Video engine escape input data is less than expected minimum size.

AnalysisAI

Information disclosure when Video engine escape input data is less than expected minimum size. Rated medium severity (CVSS 6.1), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-126. Information disclosure when Video engine escape input data is less than expected minimum size. Affected products include: Qualcomm Fastconnect 6700 Firmware, Qualcomm Fastconnect 6900 Firmware, Qualcomm Fastconnect 7800 Firmware, Qualcomm Qcm5430 Firmware, Qualcomm Qcm6490 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2025-27036 vulnerability details – vuln.today

Back