Detection of error condition without action in Qualcomm products - CVE-2025-27039
Published: December 2, 2025
Vulnerability identifier: #VU119015
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-27039
CWE-ID: CWE-390
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local application to read and manipulate data.
The vulnerability exists due to improper input validation in Computer Vision. A local application can read and manipulate data.
Affected software
FastConnect 6900
FastConnect 7800
SXR2230P
SXR2250P
WCD9380
WCD9385
WSA8830
WSA8835
WSA8832
FastConnect 7800
SXR2230P
SXR2250P
WCD9380
WCD9385
WSA8830
WSA8835
WSA8832
How to mitigate CVE-2025-27039
Install security update from vendor's website.