CVE-2025-27059 — Use of Out-of-range Pointer Offset in INC Snapdragon

CWE-823 — Use of Out-of-range Pointer OffsetCWE-369 — Divide By Zero2 documents2 sources
Severity
8.8HIGHCNA
No vector
EPSS
0.0%
top 96.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Qualcomm INC SnapdragonMsrc Azl3 Kernel 6.6.57.1-7 ON Azure Linux 3.0Msrc Azl3 Kernel 6.6.64.2-1 ON Azure Linux 3.0
Timeline
PublishedOct 9

Description

Use of Out-of-range Pointer Offset in TZ Firmware Memory corruption while performing SCM call.

Affected Packages3 packages

▶CVEListV5qualcomm_inc/snapdragon25 versions+24

🔴Vulnerability Details

1
CVEList
Use of Out-of-range Pointer Offset in TZ Firmware↗2025-10-09
▶

📋Vendor Advisories

1
Microsoft
USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command↗2024-05-14
▶
CVE-2025-27059 — Use of Out-of-range Pointer Offset | cvebase