Skip to content
OpenAdvisories
Medium · 5.5 CVE-2025-27072 EUVD-2025-23791GHSA-9jpj-67jh-qr39

Buffer Copy Without Checking Size of Input in Automotive Vehicle Networks

Published Aug 6, 2025 · Updated Aug 6, 2025 · Assigned by qualcomm

Description

Information disclosure while processing a packet at EAVB BE side with invalid header length.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon QAM8255P, QAM8295P, QAM8620P, QAM8650P, QAM8775P, QAMSRV1H, QAMSRV1M, QCA6574A, QCA6574AU, QCA6595, QCA6595AU, QCA6688AQ, QCA6696, QCA6698AQ, SA6145P, SA6150P, SA6155, SA6155P, SA7255P, SA7775P, SA8145P, SA8150P, SA8155, SA8155P, SA8195P, SA8255P, SA8295P, SA8540P, SA8620P, SA8650P, SA8770P, SA8775… —

References