Search/CVE-2025-27033
● CVE — Medium

CVE-2025-27033

VendorqualcommProductqcm6490 firmware, qcs6490 firmware, wcn6856 firmware, wcn6750 firmware, wcn7851 firmware, qca6698aq firmware, qcs8550 firmware, qcm8550 firmware, qcm5430 firmware, qcn9274 firmware, sm8635 firmware, sm8750 firmware, qcs5430 firmware, sm8750p firmware, sm7675 firmware, sm7675p firmware, sm8635p firmware, sm6650 firmware, sm7635 firmware, sxr2330p firmware, qcs9100 firmware, sm8650q firmware, qcs615 firmware, sm8650 firmware, sm8650p firmwareDiscoveredSep 24, 2025UpdatedSep 26, 2026

Information disclosure while running video usecase having rogue firmware.

CVSS v3.1
6.1 MEDIUM
EPSS
0.09%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 22, 2026
● 0.01pp
0.08% → 0.09% over 3 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityNONE
AvailabilityLOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
Connections
26 relationships
Timeline
disclosure → media coverage
Sep 24, 2025
Disclosure — published as a CVE record. · last revised by NVD Sep 26, 2026