deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-41715
Published: 2025-09-24
Description: The database for the web application is exposed without authentication, allowing an unauthenticated remote attacker to gain unauthorized access and potentially compromise it.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://certvde.com/de/advisories/VDE-2025-087
CVE: CVE-2025-41716
Published: 2025-09-24
Description: The web application allows an unauthenticated remote attacker to learn information about existing user accounts with their corresponding role due to missing authentication for critical function.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://certvde.com/de/advisories/VDE-2025-087
CVE: CVE-2025-9031
Published: 2025-09-24
Description: Observable Timing Discrepancy vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive Web allows Cross-Domain Search Timing.This issue affects DivvyDrive Web: from 4.8.2.2 before 4.8.2.15.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-203, CWE-208
References: https://www.usom.gov.tr/bildirim/tr-25-0293
CVE: CVE-2025-58457
Published: 2025-09-24
Description: Improper permission check in ZooKeeper AdminServer lets authorized clients to run snapshot and restore command with insufficient permissions.

This issue affects Apache ZooKeeper: from 3.9.0 before 3.9.4.

Users are recommended to upgrade to version 3.9.4, which fixes the issue.

The issue can be mitigated by disabling both commands (via admin.snapshot.enabled and admin.restore.enabled), disabling the whole AdminServer interface (via admin.enableServer), or ensuring that the root ACL does not provide open permissions. (Note that ZooKeeper ACLs are not recursive, so this does not impact operations on child nodes besides notifications from recursive watches.)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-280
References: https://lists.apache.org/thread/r5yol0kkhx2fzw22pxk1ozwm3oc6yxrx; http://www.openwall.com/lists/oss-security/2025/09/24/10
CVE: CVE-2024-58241
Published: 2025-09-24
Description: In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_core: Disable works on hci_unregister_dev

This make use of disable_work_* on hci_unregister_dev since the hci_dev is
about to be freed new submissions are not disarable.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/989fa5171f005ecf[PII_REDACTED]8d8aeb1795287d; https://git.kernel.org/stable/c/cfdb13a54e05eb98d9940cb6d1a13e7f994d811f
CVE: CVE-2025-39889
Published: 2025-09-24
Description: In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: l2cap: Check encryption key size on incoming connection

This is required for passing GAP/SEC/SEM/BI-04-C PTS test case:
  Security Mode 4 Level 4, Responder - Invalid Encryption Key Size
  - 128 bit

This tests the security key with size from 1 to 15 bytes while the
Security Mode 4 Level 4 requests 16 bytes key size.

Currently PTS fails with the following logs:
- expected:Connection Response:
    Code: [3 (0x03)] Code
    Identifier: (lt)WildCard: Exists(gt)
    Length: [8 (0x0008)]
    Destination CID: (lt)WildCard: Exists(gt)
    Source CID: [64 (0x0040)]
    Result: [3 (0x0003)] Connection refused - Security block
    Status: (lt)WildCard: Exists(gt),
but received:Connection Response:
    Code: [3 (0x03)] Code
    Identifier: [1 (0x01)]
    Length: [8 (0x0008)]
    Destination CID: [64 (0x0040)]
    Source CID: [64 (0x0040)]
    Result: [0 (0x0000)] Connection Successful
    Status: [0 (0x0000)] No further information available

And HCI logs:
< HCI Command: Read Encrypti.. (0x05|0x0008) plen 2
        Handle: 14 Address: 00:1B:DC:F2:24:10 (Vencer Co., Ltd.)
> HCI Event: Command Complete (0x0e) plen 7
      Read Encryption Key Size (0x05|0x0008) ncmd 1
        Status: Success (0x00)
        Handle: 14 Address: 00:1B:DC:F2:24:10 (Vencer Co., Ltd.)
        Key size: 7
> ACL Data RX: Handle 14 flags 0x02 dlen 12
      L2CAP: Connection Request (0x02) ident 1 len 4
        PSM: 4097 (0x1001)
        Source CID: 64
< ACL Data TX: Handle 14 flags 0x00 dlen 16
      L2CAP: Connection Response (0x03) ident 1 len 8
        Destination CID: 64
        Source CID: 64
        Result: Connection successful (0x0000)
        Status: No further information available (0x0000)
CVSS Score: 8.1 (HIGH)
CWE: CWE-326, CWE-326
References: https://git.kernel.org/stable/c/24b2cdfc16e9bd6ab3d03b8e01c590755bd3141f; https://git.kernel.org/stable/c/522e9ed157e3c21b4dd623c79967f72c21e45b78; https://git.kernel.org/stable/c/9e3114958d87ea88383cbbf38c89e04b8ea1bce5
CVE: CVE-2025-39890
Published: 2025-09-24
Description: In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event

Currently, in ath12k_service_ready_ext_event(), svc_rdy_ext.mac_phy_caps
is not freed in the failure case, causing a memory leak. The following
trace is observed in kmemleak:

unreferenced object 0xffff8b3eb5789c00 (size 1024):
 comm "softirq", pid 0, jiffies[PII_REDACTED]
 hex dump (first 32 bytes):
   00 00 00 00 01 00 00 00 00 00 00 00 7b 00 00 10  ............{...
   01 00 00 00 00 00 00 00 01 00 00 00 1f 38 00 00  .............8..
 backtrace (crc 44e1c357):
   __kmalloc_noprof+0x30b/0x410
   ath12k_wmi_mac_phy_caps_parse+0x84/0x100 [ath12k]
   ath12k_wmi_tlv_iter+0x5e/0x140 [ath12k]
   ath12k_wmi_svc_rdy_ext_parse+0x308/0x4c0 [ath12k]
   ath12k_wmi_tlv_iter+0x5e/0x140 [ath12k]
   ath12k_service_ready_ext_event.isra.0+0x44/0xd0 [ath12k]
   ath12k_wmi_op_rx+0x2eb/0xd70 [ath12k]
   ath12k_htc_rx_completion_handler+0x1f4/0x330 [ath12k]
   ath12k_ce_recv_process_cb+0x218/0x300 [ath12k]
   ath12k_pci_ce_workqueue+0x1b/0x30 [ath12k]
   process_one_work+0x219/0x680
   bh_worker+0x198/0x1f0
   tasklet_action+0x13/0x30
   handle_softirqs+0xca/0x460
   __irq_exit_rcu+0xbe/0x110
   irq_exit_rcu+0x9/0x30

Free svc_rdy_ext.mac_phy_caps in the error case to fix this memory leak.

Tested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://git.kernel.org/stable/c/1089f65b2de78c7837ef6b4f26146a5a5b0b9749; https://git.kernel.org/stable/c/3a392f874ac83a77ad0e53eb8aafdbeb787c9298; https://git.kernel.org/stable/c/89142d34d5602c7447827beb181fa06eb08b9d5c
CVE: CVE-2025-9054
Published: 2025-09-24
Description: The MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'wcmlim_settings_ajax_handler' function in all versions up to, and including, 4.2.8. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://codecanyon.net/item/woocommerce-multi-locations-inventory-management/28949586#item-description__changelog; https://www.wordfence.com/threat-intel/vulnerabilities/id/6a04e6ad-9365-4cb5-a0a0-82e047647d6b?source=cve
CVE: CVE-2025-10906
Published: 2025-09-24
Description: A flaw has been found in Magnetism Studios Endurance up to 3.3.0 on macOS. This affects the function loadModuleNamed:WithReply of the file /Applications/Endurance.app/Contents/Library/LaunchServices/com.MagnetismStudios.endurance.helper of the component NSXPC Interface. Executing manipulation can lead to missing authentication. The attack needs to be launched locally. The exploit has been published and may be used.
CVSS Score: 8.4 (HIGH)
CWE: CWE-287, CWE-306
References: https://github.com/SwayZGl1tZyyy/n-days/blob/main/Endurance/README.md; https://github.com/SwayZGl1tZyyy/n-days/blob/main/Endurance/README.md#proof-of-concept; https://vuldb.com/?ctiid.325691
CVE: CVE-2025-60020
Published: 2025-09-24
Description: nncp before 8.12.0 allows path traversal (for reading or writing) during freqing and file saving via a crafted path in packet data.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-23
References: http://lists.cypherpunks.su/archive/nncp-devel/CAO-d-4riai9EZx4gVfekow-BCtTn07k8BB1ZdsopPVw=scWD1A@mail.gmail.com/T/#md678a00df1020bb811f47f42ef33c54b789cddd7; http://www.nncpgo.org/Release-8_005f12_005f0.html
CVE: CVE-2025-9353
Published: 2025-09-24
Description: The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 7.6.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability was partially patched in version 7.6.9.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/themify-builder/trunk/js/editor/build/modules.min.js; https://plugins.trac.wordpress.org/browser/themify-builder/trunk/templates/template-fancy-heading.php#L73; https://plugins.trac.wordpress.org/browser/themify-builder/trunk/templates/template-fancy-heading.php#L96
CVE: CVE-2025-23248
Published: 2025-09-24
Description: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability may lead to a partial denial of service.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23248; https://nvidia.custhelp.com/app/answers/detail/a_id/5661; https://www.cve.org/CVERecord?id=CVE-2025-23248
CVE: CVE-2025-23255
Published: 2025-09-24
Description: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary where a user may cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability may lead to a partial denial of service.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23255; https://nvidia.custhelp.com/app/answers/detail/a_id/5661; https://www.cve.org/CVERecord?id=CVE-2025-23255
CVE: CVE-2025-23271
Published: 2025-09-24
Description: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability may lead to a partial denial of service.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23271; https://nvidia.custhelp.com/app/answers/detail/a_id/5661; https://www.cve.org/CVERecord?id=CVE-2025-23271
CVE: CVE-2025-23272
Published: 2025-09-24
Description: NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-125
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23272; https://nvidia.custhelp.com/app/answers/detail/a_id/5661; https://www.cve.org/CVERecord?id=CVE-2025-23272
CVE: CVE-2025-23273
Published: 2025-09-24
Description: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a divide by zero error by submitting a specially crafted JPEG file. A successful exploit of this vulnerability may lead to denial of service.
CVSS Score: 2.5 (LOW)
CWE: CWE-369
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23273; https://nvidia.custhelp.com/app/answers/detail/a_id/5661; https://www.cve.org/CVERecord?id=CVE-2025-23273
CVE: CVE-2025-23274
Published: 2025-09-24
Description: NVIDIA nvJPEG contains a vulnerability in jpeg encoding where a user may cause an out-of-bounds read by providing a maliciously crafted input image with dimensions that cause integer overflows in array index calculations. A successful exploit of this vulnerability may lead to denial of service.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-125
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23274; https://nvidia.custhelp.com/app/answers/detail/a_id/5661; https://www.cve.org/CVERecord?id=CVE-2025-23274
CVE: CVE-2025-23275
Published: 2025-09-24
Description: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a GPU out-of-bounds write by providing certain image dimensions.  A successful exploit of this vulnerability may lead to denial of service and information disclosure.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-787
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23275; https://nvidia.custhelp.com/app/answers/detail/a_id/5661; https://www.cve.org/CVERecord?id=CVE-2025-23275
CVE: CVE-2025-23308
Published: 2025-09-24
Description: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where an attacker may cause a heap-based buffer overflow by getting the user to run nvdisasm on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege level of the user running nvdisasm.
CVSS Score: 3.3 (LOW)
CWE: CWE-122
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23308; https://nvidia.custhelp.com/app/answers/detail/a_id/5661; https://www.cve.org/CVERecord?id=CVE-2025-23308
CVE: CVE-2025-23338
Published: 2025-09-24
Description: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where a user may cause an out-of-bounds write by running nvdisasm on a malicious ELF file. A successful exploit of this vulnerability may lead to denial of service.
CVSS Score: 3.3 (LOW)
CWE: CWE-129
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23338; https://nvidia.custhelp.com/app/answers/detail/a_id/5661; https://www.cve.org/CVERecord?id=CVE-2025-23338
CVE: CVE-2025-23339
Published: 2025-09-24
Description: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by getting the user to run cuobjdump on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege level of the user running 
cuobjdump.
CVSS Score: 3.3 (LOW)
CWE: CWE-121
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23339; https://nvidia.custhelp.com/app/answers/detail/a_id/5661; https://www.cve.org/CVERecord?id=CVE-2025-23339
CVE: CVE-2025-23340
Published: 2025-09-24
Description: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability may lead to a partial denial of service.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23340; https://nvidia.custhelp.com/app/answers/detail/a_id/5661; https://www.cve.org/CVERecord?id=CVE-2025-23340
CVE: CVE-2025-23346
Published: 2025-09-24
Description: NVIDIA CUDA Toolkit contains a vulnerability in cuobjdump, where an unprivileged user can cause a NULL pointer dereference.  A successful exploit of this vulnerability may lead to a limited denial of service.
CVSS Score: 3.3 (LOW)
CWE: CWE-476
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23346; https://nvidia.custhelp.com/app/answers/detail/a_id/5661; https://www.cve.org/CVERecord?id=CVE-2025-23346
CVE: CVE-2025-23348
Published: 2025-09-24
Description: NVIDIA Megatron-LM for all platforms contains a vulnerability in the pretrain_gpt script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23348; https://nvidia.custhelp.com/app/answers/detail/a_id/5698; https://www.cve.org/CVERecord?id=CVE-2025-23348
CVE: CVE-2025-23349
Published: 2025-09-24
Description: NVIDIA Megatron-LM for all platforms contains a vulnerability in the tasks/orqa/unsupervised/nq.py component, where an attacker may cause a code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23349; https://nvidia.custhelp.com/app/answers/detail/a_id/5698; https://www.cve.org/CVERecord?id=CVE-2025-23349
CVE: CVE-2025-23353
Published: 2025-09-24
Description: NVIDIA Megatron-LM for all platforms contains a vulnerability in the msdp preprocessing script where malicious data created by an attacker may cause an injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, Information disclosure, and data tampering.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23353; https://nvidia.custhelp.com/app/answers/detail/a_id/5698; https://www.cve.org/CVERecord?id=CVE-2025-23353
CVE: CVE-2025-23354
Published: 2025-09-24
Description: NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensemble_classifer script where malicious data created by an attacker may cause an injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, Information disclosure, and data tampering.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23354; https://nvidia.custhelp.com/app/answers/detail/a_id/5698; https://www.cve.org/CVERecord?id=CVE-2025-23354
CVE: CVE-2025-48868
Published: 2025-09-24
Description: Horilla is a free and open source Human Resource Management System (HRMS). An authenticated Remote Code Execution (RCE) vulnerability exists in Horilla 1.3.0 due to the unsafe use of Python’s eval() function on a user-controlled query parameter in the project_bulk_archive view. This allows privileged users (e.g., administrators) to execute arbitrary system commands on the server. While having Django’s DEBUG=True makes exploitation visibly easier by returning command output in the HTTP response, this is not required. The vulnerability can still be exploited in DEBUG=False mode by using blind payloads such as a reverse shell, leading to full remote code execution. This issue has been patched in version 1.3.1.
CVSS Score: 7.2 (HIGH)
CWE: CWE-95
References: https://drive.google.com/file/d/1XQAJilt77QxkjGEa94CsZRqZIZXa3ET9/view?usp=sharing; https://drive.google.com/file/d/1hnI9AK3fnpVrTlTRF7aRJsKhZCDIm2Ve/view?usp=sharing; https://github.com/horilla-opensource/horilla/commit/b0aab62b3a5fe6b7114b5c58db129b3744b4d8cc
CVE: CVE-2025-8869
Published: 2025-09-24
Description: When extracting a tar archive pip may not check symbolic links point into the extraction directory if the tarfile module doesn't implement PEP 706.
Note that upgrading pip to a "fixed" version for this vulnerability doesn't fix all known vulnerabilities that are remediated by using a Python version that implements PEP 706.

Note that this is a vulnerability in pip's fallback implementation of tar extraction for Python versions that don't implement PEP 706
and therefore are not secure to all vulnerabilities in the Python 'tarfile' module. If you're using a Python version that implements PEP 706
then pip doesn't use the "vulnerable" fallback code.

Mitigations include upgrading to a version of pip that includes the fix, upgrading to a Python version that implements PEP 706 (Python >=3.9.17, >=3.10.12, >=3.11.4, or >=3.12),
applying the linked patch, or inspecting source distributions (sdists) before installation as is already a best-practice.
References: https://github.com/pypa/pip/pull/13550; https://mail.python.org/archives/list/security-announce@python.org/thread/IF5A3GCJY3VH7BVHJKOWOJFKTW7VFQEN/; https://lists.debian.org/debian-lts-announce/2025/10/msg00028.html
CVE: CVE-2025-10360
Published: 2025-09-24
Description: In Puppet Enterprise versions 2025.4.0 and 2025.5, the encryption key used for encrypting content in the Infra Assistant database was not excluded from the files gathered by Puppet backup. The key is only present on the system if the user has a Puppet Enterprise Advanced license and has enabled the Infra Assistant feature. The key is used for encrypting one particular bit of data in the Infra Assistant database: the API key for their AI provider account. This has been fixed in Puppet Enterprise version 2025.6, and release notes for 2025.6 have remediation steps for users of affected versions who can't update to the latest version.
CWE: CWE-522
References: https://portal.perforce.com/s/cve/a91PA000001Smp7YAC/insufficiently-protected-credentials-in-puppet-enterprise-20254-and-20255
CVE: CVE-2025-21476
Published: 2025-09-24
Description: Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html
CVE: CVE-2025-21481
Published: 2025-09-24
Description: Memory corruption while performing private key encryption in trusted application.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html
CVE: CVE-2025-21482
Published: 2025-09-24
Description: Cryptographic issue while performing RSA PKCS padding decoding.
CVSS Score: 7.1 (HIGH)
CWE: CWE-310
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html
CVE: CVE-2025-21483
Published: 2025-09-24
Description: Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html
CVE: CVE-2025-21484
Published: 2025-09-24
Description: Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
CVSS Score: 8.2 (HIGH)
CWE: CWE-126
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html
CVE: CVE-2025-21487
Published: 2025-09-24
Description: Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
CVSS Score: 8.2 (HIGH)
CWE: CWE-126
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html
CVE: CVE-2025-21488
Published: 2025-09-24
Description: Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.
CVSS Score: 8.2 (HIGH)
CWE: CWE-126
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html
CVE: CVE-2025-27030
Published: 2025-09-24
Description: information disclosure while invoking calibration data from user space to update firmware size.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-126
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html
CVE: CVE-2025-27032
Published: 2025-09-24
Description: memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1257
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html
CVE: CVE-2025-27033
Published: 2025-09-24
Description: Information disclosure while running video usecase having rogue firmware.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-126
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html
CVE: CVE-2025-27034
Published: 2025-09-24
Description: Memory corruption while selecting the PLMN from SOR failed list.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-129
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html