CVE-2025-27066 — Reachable Assertion in INC Snapdragon

CWE-617 — Reachable AssertionCWE-401 — Missing Release of Memory after Effective Lifetime3 documents3 sources
Severity
7.5HIGHCNA
No vector
EPSS
0.0%
top 92.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Qualcomm INC SnapdragonGoogle AndroidMsrc Azl3 Hyperv-daemons 6.6.22.1-2 ON Azure Linux 3.0+3 more
Timeline
PublishedAug 6
Latest updateSep 1

Description

Reachable Assertion in WLAN Firmware Transient DOS while processing an ANQP message.

Affected Packages6 packages

▶CVEListV5qualcomm_inc/snapdragon367 versions+366

🔴Vulnerability Details

1
CVEList
Reachable Assertion in WLAN Firmware↗2025-08-06
▶

📋Vendor Advisories

2
Android
CVE-2025-27066: Closed-source component↗2025-09-01
▶
Microsoft
virtio: packed: fix unmap leak for indirect desc table↗2024-05-14
▶