{"id":"CVE-2025-27040","title":"Information disclosure may occur while processing the hypervisor log.","summary":"Information disclosure may occur while processing the hypervisor log.","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cwe":["CWE-20"],"vendor":"qualcomm","product":"csr8811_firmware","affected":["csr8811_firmware","immersive_home_214_platform_firmware","immersive_home_216_platform_firmware","immersive_home_316_platform_firmware","immersive_home_318_platform_firmware","ipq5010_firmware","ipq5028_firmware","ipq8070_firmware","ipq8070a_firmware","ipq8071_firmware","ipq8071a_firmware","ipq8072_firmware","ipq8072a_firmware","ipq8074_firmware","ipq8074a_firmware","ipq8076_firmware","ipq8076a_firmware","ipq8078_firmware","ipq8078a_firmware","ipq8173_firmware","ipq8174_firmware","ipq9008_firmware","ipq9574_firmware","pmp8074_firmware","qca4024_firmware","qca6428_firmware","qca6438_firmware","qca6694_firmware","qca8072_firmware","qca8075_firmware","qca8081_firmware","qca9888_firmware","qca9889_firmware","qca9984_firmware","qcn5022_firmware","qcn5024_firmware","qcn5052_firmware","qcn5054_firmware","qcn5064_firmware","qcn5122_firmware","qcn5124_firmware","qcn5152_firmware","qcn5154_firmware","qcn5164_firmware","qcn5550_firmware","qcn6023_firmware","qcn6024_firmware","qcn6100_firmware","qcn6102_firmware","qcn6112_firmware","qcn6122_firmware","qcn6132_firmware","qcn9000_firmware","qcn9001_firmware","qcn9002_firmware","qcn9003_firmware","qcn9012_firmware","qcn9022_firmware","qcn9024_firmware","qcn9070_firmware","qcn9072_firmware","qcn9074_firmware","qcn9100_firmware","qcn9274_firmware","sdx55_firmware"],"published":"2025-10-09","updated":"2026-10-08","sourceUpdated":"2026-10-08T13:10:00.200","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-27040","references":[{"url":"https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html","label":"product-security@qualcomm.com"}],"tags":["nvd"],"epss":0.00085,"epssPercentile":0.00252,"ingestedAt":"2026-10-08T13:42:55.027Z","slug":"CVE-2025-27040","body":"## Overview\n\nInformation disclosure may occur while processing the hypervisor log.\n\n## Affected\n\n- `csr8811_firmware`\n- `immersive_home_214_platform_firmware`\n- `immersive_home_216_platform_firmware`\n- `immersive_home_316_platform_firmware`\n- `immersive_home_318_platform_firmware`\n- `ipq5010_firmware`\n- `ipq5028_firmware`\n- `ipq8070_firmware`\n- `ipq8070a_firmware`\n- `ipq8071_firmware`\n- `ipq8071a_firmware`\n- `ipq8072_firmware`\n- `ipq8072a_firmware`\n- `ipq8074_firmware`\n- `ipq8074a_firmware`\n- `ipq8076_firmware`\n- `ipq8076a_firmware`\n- `ipq8078_firmware`\n- `ipq8078a_firmware`\n- `ipq8173_firmware`\n- `ipq8174_firmware`\n- `ipq9008_firmware`\n- `ipq9574_firmware`\n- `pmp8074_firmware`\n- `qca4024_firmware`\n- `qca6428_firmware`\n- `qca6438_firmware`\n- `qca6694_firmware`\n- `qca8072_firmware`\n- `qca8075_firmware`\n- `qca8081_firmware`\n- `qca9888_firmware`\n- `qca9889_firmware`\n- `qca9984_firmware`\n- `qcn5022_firmware`\n- `qcn5024_firmware`\n- `qcn5052_firmware`\n- `qcn5054_firmware`\n- `qcn5064_firmware`\n- `qcn5122_firmware`\n- `qcn5124_firmware`\n- `qcn5152_firmware`\n- `qcn5154_firmware`\n- `qcn5164_firmware`\n- `qcn5550_firmware`\n- `qcn6023_firmware`\n- `qcn6024_firmware`\n- `qcn6100_firmware`\n- `qcn6102_firmware`\n- `qcn6112_firmware`\n- `qcn6122_firmware`\n- `qcn6132_firmware`\n- `qcn9000_firmware`\n- `qcn9001_firmware`\n- `qcn9002_firmware`\n- `qcn9003_firmware`\n- `qcn9012_firmware`\n- `qcn9022_firmware`\n- `qcn9024_firmware`\n- `qcn9070_firmware`\n- `qcn9072_firmware`\n- `qcn9074_firmware`\n- `qcn9100_firmware`\n- `qcn9274_firmware`\n- `sdx55_firmware`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}