How to fix CVE-2025-27036?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Is Fastconnect 6700 Firmware affected by CVE-2025-27036?

Organizations using Information disclosure when Video engine escape input data should be aware of moderate risk from CVE-2025-27036 rated CVSS 6.1. Exploitation could compromise the security of affected deployments.

CVE-2025-27036

MEDIUM

2025-09-24 [email protected]

6.1

CVSS 3.1

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 19:14 vuln.today

CVE Published

Sep 24, 2025 - 16:15 nvd

MEDIUM 6.1

Tags

Buffer Overflow Information Disclosure Fastconnect 6700 Firmware Fastconnect 6900 Firmware Fastconnect 7800 Firmware Qcm5430 Firmware Qcm6490 Firmware Qcs5430 Firmware Qcs6490 Firmware Video Collaboration Vc3 Platform Firmware Sc8380xp Firmware Snapdragon 7C Gen 3 Compute Firmware Snapdragon 8Cx Gen 3 Compute Platform Sc8280Xp Ab Firmware Snapdragon 8Cx Gen 3 Compute Platform Sc8280Xp Bb Firmware Wcd9370 Firmware Wcd9375 Firmware Wcd9380 Firmware Wcd9385 Firmware Wsa8830 Firmware Wsa8835 Firmware Wsa8840 Firmware Wsa8845 Firmware Wsa8845h Firmware

Description

Information disclosure when Video engine escape input data is less than expected minimum size.

Analysis

Information disclosure when Video engine escape input data is less than expected minimum size. Rated medium severity (CVSS 6.1), this vulnerability is low attack complexity. No vendor patch available.

Technical Context

This vulnerability is classified under CWE-126. Information disclosure when Video engine escape input data is less than expected minimum size. Affected products include: Qualcomm Fastconnect 6700 Firmware, Qualcomm Fastconnect 6900 Firmware, Qualcomm Fastconnect 7800 Firmware, Qualcomm Qcm5430 Firmware, Qualcomm Qcm6490 Firmware.

Affected Products

Qualcomm Fastconnect 6700 Firmware, Qualcomm Fastconnect 6900 Firmware, Qualcomm Fastconnect 7800 Firmware, Qualcomm Qcm5430 Firmware, Qualcomm Qcm6490 Firmware.

Remediation

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +0.0

CVSS: +30

POC: 0

CVE-2025-27036 vulnerability details – vuln.today

Back