Skip to content
OpenAdvisories
High · 8.8 CVE-2025-27060 EUVD-2025-33240GHSA-r534-8mpf-f4rr

Untrusted Pointer Dereference in TZ Firmware

Published Oct 9, 2025 · Updated Feb 26, 2026 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption while performing SCM call with malformed inputs.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon Immersive Home 214 Platform, Immersive Home 216 Platform, Immersive Home 316 Platform, Immersive Home 318 Platform, IPQ5010, IPQ5028, QCN6023, QCN6024, QCN6100, QCN6102, QCN6112, QCN6122, QCN6132, QCN9000, QCN9001, QCN9002, QCN9003, QCN9012, QCN9022, QCN9024, QCN9070, QCN9072, QCN9074, QCN9100, QCN… —

References