CVE-2025-27032 — Improper Access Control Applied to Mirrored or Aliased Memory Regions in INC Snapdragon

CWE-1257 — Improper Access Control Applied to Mirrored or Aliased Memory RegionsCWE-835 — Infinite Loop4 documents4 sources
Severity
7.8HIGHNVD
EPSS
0.0%
top 96.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Qualcomm INC SnapdragonGoogle AndroidMsrc Cbl2 Kernel 5.15.182.1-1 ON CBL Mariner 2.0
Timeline
PublishedSep 24

Description

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages3 packages

▶CVEListV5qualcomm_inc/snapdragon187 versions+186

🔴Vulnerability Details

1
GHSA
GHSA-xw4h-j9r2-r43w: memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency↗2025-09-24
▶

📋Vendor Advisories

2
Android
CVE-2025-27032: Closed-source component↗2025-09-01
▶
Microsoft
f2fs: fix to avoid potential panic during recovery↗2024-05-14
▶