Skip to main content

Qcc2073 Firmware EUVDEUVD-2025-20471

| CVE-2025-27051 HIGH
Double Free (CWE-415)
2025-07-08 product-security@qualcomm.com
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

3
EUVD ID Assigned
Mar 16, 2026 - 04:21 euvd
EUVD-2025-20471
Analysis Generated
Mar 16, 2026 - 04:21 vuln.today
CVE Published
Jul 08, 2025 - 13:15 nvd
HIGH 7.8

DescriptionCVE.org

Memory corruption while processing command message in WLAN Host.

AnalysisAI

CVE-2025-27051 is a security vulnerability (CVSS 7.8). High severity vulnerability requiring prompt remediation.

Technical ContextAI

Vulnerability type not specified by vendor. CVSS 7.8 indicates high severity.

RemediationAI

Monitor vendor channels for patch availability.

CVE-2023-33045 CRITICAL
9.8 Nov 07

Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute. Rated critical severity

CVE-2023-33028 CRITICAL
9.8 Oct 03

Memory corruption in WLAN Firmware while doing a memory copy of pmk cache. Rated critical severity (CVSS 9.8), this vuln

CVE-2024-38408 CRITICAL
9.1 Nov 04

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions. Rated critic

CVE-2024-21456 CRITICAL
9.1 Jul 01

Information Disclosure while parsing beacon frame in STA. Rated critical severity (CVSS 9.1), this vulnerability is remo

CVE-2023-28572 HIGH
8.8 Nov 07

Memory corruption in WLAN HOST while processing the WLAN scan descriptor list. Rated high severity (CVSS 8.8), this vuln

CVE-2024-33073 HIGH
8.2 Oct 07

Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE. Rated high

CVE-2025-21441 HIGH
7.8 Apr 07

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver. Rated high severity (CV

CVE-2025-21440 HIGH
7.8 Apr 07

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver. Rated high severity (CV

CVE-2024-43053 HIGH
7.8 Dec 02

Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information. Rated high seve

CVE-2024-43050 HIGH
7.8 Dec 02

Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver. Rated hig

CVE-2024-43049 HIGH
7.8 Dec 02

Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver. Rated hi

CVE-2024-38410 HIGH
7.8 Nov 04

Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice. R

Share

EUVD-2025-20471 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy