deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-21005
Published: 2025-07-08
Description: Improper access control in isemtelephony prior to Android 15 allows local attackers to access sensitive information.
CVSS Score: 5.5 (MEDIUM)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=07
CVE: CVE-2025-21006
Published: 2025-07-08
Description: Out-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android 15 allows local attackers to write out-of-bounds memory.
CVSS Score: 7.0 (HIGH)
CWE: CWE-787
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=07
CVE: CVE-2025-21007
Published: 2025-07-08
Description: Out-of-bounds write in accessing uninitialized memory in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=07
CVE: CVE-2025-21008
Published: 2025-07-08
Description: Out-of-bounds read in decoding frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=07
CVE: CVE-2025-21009
Published: 2025-07-08
Description: Out-of-bounds read in decoding malformed frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=07
CVE: CVE-2025-23364
Published: 2025-07-08
Description: A vulnerability has been identified in TIA Administrator (All versions < V3.0.6). The affected application improperly validates code signing certificates.
This could allow an attacker to bypass the check and exceute arbitrary code during installations.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-347
References: https://cert-portal.siemens.com/productcert/html/ssa-573669.html
CVE: CVE-2025-23365
Published: 2025-07-08
Description: A vulnerability has been identified in TIA Administrator (All versions < V3.0.6). The affected application allows low-privileged users to trigger installations by overwriting cache files and modifying the downloads path. This would allow an attacker to escalate privilege and exceute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://cert-portal.siemens.com/productcert/html/ssa-573669.html
CVE: CVE-2025-27127
Published: 2025-07-08
Description: A vulnerability has been identified in TIA Project-Server (All versions < V2.1.1), TIA Project-Server V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions < V19 Update 4), Totally Integrated Automation Portal (TIA Portal) V20 (All versions < V20 Update 3). The affected application improperly handles uploaded projects in the document root. This could allow an attacker with contributor privileges to cause denial of service by uploading a malicious project.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-434
References: https://cert-portal.siemens.com/productcert/html/ssa-460466.html
CVE: CVE-2025-40593
Published: 2025-07-08
Description: A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0). The affected application allows to control the device by storing arbitrary files in the SFTP folder of the device. This could allow an attacker to cause a denial of service condition.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://cert-portal.siemens.com/productcert/html/ssa-626991.html
CVE: CVE-2025-40735
Published: 2025-07-08
Description: A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected devices are vulnerable to SQL injection. This could allow an unauthenticated remote attacker to execute arbitrary SQL queries on the server database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://cert-portal.siemens.com/productcert/html/ssa-078892.html
CVE: CVE-2025-40736
Published: 2025-07-08
Description: A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application exposes an endpoint that allows an unauthorized modification of administrative credentials. This could allow an unauthenticated attacker to reset the superadmin password and gain full control of the application (ZDI-CAN-26569).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://cert-portal.siemens.com/productcert/html/ssa-078892.html
CVE: CVE-2025-40737
Published: 2025-07-08
Description: A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application does not properly validate file paths when extracting uploaded ZIP files. This could allow an attacker to write arbitrary files to restricted locations and potentially execute code with elevated privileges (ZDI-CAN-26571).
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://cert-portal.siemens.com/productcert/html/ssa-078892.html
CVE: CVE-2025-40738
Published: 2025-07-08
Description: A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application does not properly validate file paths when extracting uploaded ZIP files. This could allow an attacker to write arbitrary files to restricted locations and potentially execute code with elevated privileges (ZDI-CAN-26572).
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://cert-portal.siemens.com/productcert/html/ssa-078892.html
CVE: CVE-2025-40739
Published: 2025-07-08
Description: A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files.
This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://cert-portal.siemens.com/productcert/html/ssa-091753.html
CVE: CVE-2025-40740
Published: 2025-07-08
Description: A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files.
This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://cert-portal.siemens.com/productcert/html/ssa-091753.html
CVE: CVE-2025-40741
Published: 2025-07-08
Description: A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications contain a stack based overflow vulnerability while parsing specially crafted CFG files.
This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121
References: https://cert-portal.siemens.com/productcert/html/ssa-091753.html
CVE: CVE-2025-40742
Published: 2025-07-08
Description: A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions), SIPROTEC 5 6MD89 (CP300) (All versions), SIPROTEC 5 6MD89 (CP300) V9.6 (All versions), SIPROTEC 5 6MU85 (CP300) (All versions), SIPROTEC 5 7KE85 (CP300) (All versions), SIPROTEC 5 7SA82 (CP100) (All versions), SIPROTEC 5 7SA82 (CP150) (All versions), SIPROTEC 5 7SA86 (CP300) (All versions), SIPROTEC 5 7SA87 (CP300) (All versions), SIPROTEC 5 7SD82 (CP100) (All versions), SIPROTEC 5 7SD82 (CP150) (All versions), SIPROTEC 5 7SD86 (CP300) (All versions), SIPROTEC 5 7SD87 (CP300) (All versions), SIPROTEC 5 7SJ81 (CP100) (All versions), SIPROTEC 5 7SJ81 (CP150) (All versions), SIPROTEC 5 7SJ82 (CP100) (All versions), SIPROTEC 5 7SJ82 (CP150) (All versions), SIPROTEC 5 7SJ85 (CP300) (All versions), SIPROTEC 5 7SJ86 (CP300) (All versions), SIPROTEC 5 7SK82 (CP100) (All versions), SIPROTEC 5 7SK82 (CP150) (All versions), SIPROTEC 5 7SK85 (CP300) (All versions), SIPROTEC 5 7SL82 (CP100) (All versions), SIPROTEC 5 7SL82 (CP150) (All versions), SIPROTEC 5 7SL86 (CP300) (All versions), SIPROTEC 5 7SL87 (CP300) (All versions), SIPROTEC 5 7SS85 (CP300) (All versions), SIPROTEC 5 7ST85 (CP300) (All versions), SIPROTEC 5 7ST86 (CP300) (All versions), SIPROTEC 5 7SX82 (CP150) (All versions), SIPROTEC 5 7SX85 (CP300) (All versions), SIPROTEC 5 7SY82 (CP150) (All versions), SIPROTEC 5 7UM85 (CP300) (All versions), SIPROTEC 5 7UT82 (CP100) (All versions), SIPROTEC 5 7UT82 (CP150) (All versions), SIPROTEC 5 7UT85 (CP300) (All versions), SIPROTEC 5 7UT86 (CP300) (All versions), SIPROTEC 5 7UT87 (CP300) (All versions), SIPROTEC 5 7VE85 (CP300) (All versions), SIPROTEC 5 7VK87 (CP300) (All versions), SIPROTEC 5 7VU85 (CP300) (All versions), SIPROTEC 5 Compact 7SX800 (CP050) (All versions). The affected devices include session identifiers in URL requests for certain functionalities. This could allow an attacker to retrieve sensitive session data from browser history, logs, or other storage mechanisms, potentially leading to unauthorized access.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-598
References: https://cert-portal.siemens.com/productcert/html/ssa-904646.html
CVE: CVE-2025-41224
Published: 2025-07-08
Description: A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.0), RUGGEDCOM RMC8388NC V5.X (All versions < V5.10.0), RUGGEDCOM RS416NCv2 V5.X (All versions < V5.10.0), RUGGEDCOM RS416PNCv2 V5.X (All versions < V5.10.0), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.10.0), RUGGEDCOM RS416v2 V5.X (All versions < V5.10.0), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900GNC(32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900NC(32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100NC(32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100PNC (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2288 V5.X (All versions < V5.10.0), RUGGEDCOM RSG2288NC V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300 V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300NC V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300P V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300PNC V5.X (All versions < V5.10.0), RUGGEDCOM RSG2488 V5.X (All versions < V5.10.0), RUGGEDCOM RSG2488NC V5.X (All versions < V5.10.0), RUGGEDCOM RSG907R (All versions < V5.10.0), RUGGEDCOM RSG908C (All versions < V5.10.0), RUGGEDCOM RSG909R (All versions < V5.10.0), RUGGEDCOM RSG910C (All versions < V5.10.0), RUGGEDCOM RSG920P V5.X (All versions < V5.10.0), RUGGEDCOM RSG920PNC V5.X (All versions < V5.10.0), RUGGEDCOM RSL910 (All versions < V5.10.0), RUGGEDCOM RSL910NC (All versions < V5.10.0), RUGGEDCOM RST2228 (All versions < V5.10.0), RUGGEDCOM RST2228P (All versions < V5.10.0), RUGGEDCOM RST916C (All versions < V5.10.0), RUGGEDCOM RST916P (All versions < V5.10.0). The affected products do not properly enforce interface access restrictions when changing from management to non-management interface configurations until a system reboot occurs, despite configuration being saved. This could allow an attacker with network access and credentials to gain access to device through non-management and maintain SSH access to the device until reboot.
CVSS Score: 8.8 (HIGH)
CWE: CWE-693
References: https://cert-portal.siemens.com/productcert/html/ssa-083019.html
CVE: CVE-2025-7174
Published: 2025-07-08
Description: A vulnerability was found in code-projects Library System 1.0 and classified as critical. This issue affects some unknown processing of the file /teacher-issue-book.php. The manipulation of the argument idn leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/Qq2240151/CVE/issues/1; https://vuldb.com/?ctiid.315113
CVE: CVE-2025-7175
Published: 2025-07-08
Description: A vulnerability was found in code-projects E-Commerce Site 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/users_photo.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284, CWE-434
References: https://code-projects.org/; https://github.com/kn1g78/cve/blob/main/ecom.md; https://vuldb.com/?ctiid.315114
CVE: CVE-2025-40711
Published: 2025-07-08
Description: SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the id_concesion parameter in /<Client>FacturaE/VerFacturaPDF.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-quiterweb-autoweb-quiter
CVE: CVE-2025-40712
Published: 2025-07-08
Description: SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the id_concesion parameter in /<Client>FacturaE/DescargarFactura.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-quiterweb-autoweb-quiter
CVE: CVE-2025-40713
Published: 2025-07-08
Description: SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo parameter in/<Client>FacturaE/BusquedasFacturasSesion.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-quiterweb-autoweb-quiter
CVE: CVE-2025-40714
Published: 2025-07-08
Description: SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo id_factura in /<Client>FacturaE/listado_facturas_ficha.jsp.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-quiterweb-autoweb-quiter
CVE: CVE-2025-40715
Published: 2025-07-08
Description: SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo mensaje in /QISClient/api/v1/sucesospaginas.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-quiterweb-autoweb-quiter
CVE: CVE-2025-40716
Published: 2025-07-08
Description: SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the suceso.contenido mensaje in /QMSCliente/Sucesos.action.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-quiterweb-autoweb-quiter
CVE: CVE-2025-40717
Published: 2025-07-08
Description: SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pagina.filter.categoria mensaje in /QuiterGatewayWeb/api/v1/sucesospagina.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-quiterweb-autoweb-quiter
CVE: CVE-2025-40718
Published: 2025-07-08
Description: Improper error handling vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to send malformed payloads to generate error messages containing sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-209
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-quiterweb-autoweb-quiter
CVE: CVE-2025-40719
Published: 2025-07-08
Description: Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL trhough the id_concesion parameter in /<Client>FacturaE/VerFacturaPDF.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-quiterweb-autoweb-quiter
CVE: CVE-2025-40720
Published: 2025-07-08
Description: Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL trhough the campo parameter in /<Client>FacturaE/VerFacturaPDF.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-quiterweb-autoweb-quiter
CVE: CVE-2025-40721
Published: 2025-07-08
Description: Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL trhough the id_factura parameter in /<Client>FacturaE/listado_facturas_ficha.jsp.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-quiterweb-autoweb-quiter
CVE: CVE-2025-7176
Published: 2025-07-08
Description: A vulnerability was found in PHPGurukul Hospital Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file view-medhistory.php. The manipulation of the argument viewid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/y2xsec324/cve/issues/9; https://phpgurukul.com/; https://vuldb.com/?ctiid.315115
CVE: CVE-2025-7177
Published: 2025-07-08
Description: A vulnerability was found in PHPGurukul Car Washing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/editcar-washpoint.php. The manipulation of the argument wpid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/y2xsec324/cve/issues/10; https://phpgurukul.com/; https://vuldb.com/?ctiid.315116
CVE: CVE-2024-53009
Published: 2025-07-08
Description: Memory corruption while operating the mailbox in Automotive.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-129
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE: CVE-2025-21422
Published: 2025-07-08
Description: Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.
CVSS Score: 7.1 (HIGH)
CWE: CWE-310
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE: CVE-2025-21426
Published: 2025-07-08
Description: Memory corruption while processing camera TPG write request.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-120
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE: CVE-2025-21427
Published: 2025-07-08
Description: Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.
CVSS Score: 8.2 (HIGH)
CWE: CWE-126, CWE-125
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE: CVE-2025-21432
Published: 2025-07-08
Description: Memory corruption while retrieving the CBOR data from TA.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE: CVE-2025-21433
Published: 2025-07-08
Description: Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-476
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE: CVE-2025-21444
Published: 2025-07-08
Description: Memory corruption while copying the result to the transmission queue in EMAC.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE: CVE-2025-21445
Published: 2025-07-08
Description: Memory corruption while copying the result to the transmission queue which is shared between the virtual machine and the host.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE: CVE-2025-21446
Published: 2025-07-08
Description: Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126, CWE-125
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE: CVE-2025-21449
Published: 2025-07-08
Description: Transient DOS may occur while processing malformed length field in SSID IEs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126, CWE-125
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE: CVE-2025-21450
Published: 2025-07-08
Description: Cryptographic issue occurs due to use of insecure connection method while downloading.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-287, CWE-863
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE: CVE-2025-21454
Published: 2025-07-08
Description: Transient DOS while processing received beacon frame.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126, CWE-125
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE: CVE-2025-21466
Published: 2025-07-08
Description: Memory corruption while processing a private escape command in an event trigger.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE: CVE-2025-27042
Published: 2025-07-08
Description: Memory corruption while processing video packets received from video firmware.
CVSS Score: 7.8 (HIGH)
CWE: CWE-131, CWE-131
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE: CVE-2025-27043
Published: 2025-07-08
Description: Memory corruption while processing manipulated payload in video firmware.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE: CVE-2025-27044
Published: 2025-07-08
Description: Memory corruption while executing timestamp video decode command with large input values.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE: CVE-2025-27046
Published: 2025-07-08
Description: Memory corruption while processing multiple simultaneous escape calls.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE: CVE-2025-27047
Published: 2025-07-08
Description: Memory corruption while processing the TESTPATTERNCONFIG escape path.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE: CVE-2025-27050
Published: 2025-07-08
Description: Memory corruption while processing event close when client process terminates abruptly.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE: CVE-2025-27051
Published: 2025-07-08
Description: Memory corruption while processing command message in WLAN Host.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html