{"id":"CVE-2025-27053","title":"Memory corruption during PlayReady APP usecase while processing TA commands.","summary":"Memory corruption during PlayReady APP usecase while processing TA commands.","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-131"],"vendor":"qualcomm","product":"315_5g_iot_modem_firmware","affected":["315_5g_iot_modem_firmware","9205_lte_modem_firmware","mdm9650_firmware","msm8996au_firmware","pm8937_firmware","qam8255p_firmware","qam8295p_firmware","qam8620p_firmware","qam8650p_firmware","qam8775p_firmware","qamsrv1h_firmware","qamsrv1m_firmware","qca4004_firmware","qca6174a_firmware","qca6234_firmware","qca6310_firmware","qca6320_firmware","qca6335_firmware","qca6391_firmware","qca6420_firmware","qca6421_firmware","sd730_firmware","sd820_firmware","sd821_firmware","sd855_firmware","sd865_5g_firmware","sd888_firmware","sdm429w_firmware","sdx55_firmware","sdx61_firmware","sdx82_firmware","sdx85_firmware","sg4150p_firmware","sg6150_firmware","sg6150p_firmware","mdm9640_firmware","mdm9628_firmware","mdm9250_firmware","mdm9205s_firmware","mdm8207_firmware","home_hub_100_platform_firmware","flight_rb5_5g_platform_firmware","fastconnect_7800_firmware","fastconnect_6900_firmware","fastconnect_6800_firmware","fastconnect_6700_firmware","fastconnect_6200_firmware","csrb31024_firmware","csra6640_firmware","csra6620_firmware","c-v2x_9150_firmware","ar8035_firmware","ar8031_firmware","aqt1000_firmware","apq8064au_firmware","apq8037_firmware","apq8017_firmware","9207_lte_modem_firmware","9206_lte_modem_firmware","sg8275p_firmware","sm4125_firmware","sm4635_firmware","sm6225p_firmware","sm6250_firmware","sm6250p_firmware","sm6370_firmware","sm6650_firmware","sm6650p_firmware","sm7250p_firmware","sm7315_firmware","sm7325p_firmware","sm7635_firmware","sm7635p_firmware","sm7675_firmware","sm7675p_firmware","sm8550p_firmware","sm8635_firmware","sm8635p_firmware","sm8650q_firmware","sm8735_firmware","sm8750_firmware","sm8750p_firmware","sm8850_firmware","sm8850p_firmware","smart_audio_400_platform_firmware","qca6426_firmware","qca6430_firmware","qca6431_firmware","qca6436_firmware","qca6564_firmware","qca6564a_firmware","qca6564au_firmware","qca6574_firmware","qca6574a_firmware","qca6574au_firmware","qca6584au_firmware","qca6595_firmware","qca6595au_firmware","qca6678aq_firmware","qca6688aq_firmware"],"published":"2025-10-09","updated":"2026-10-08","sourceUpdated":"2026-10-08T13:10:00.200","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-27053","references":[{"url":"https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html","label":"product-security@qualcomm.com"}],"tags":["nvd"],"epss":0.00087,"epssPercentile":0.00307,"ingestedAt":"2026-10-08T13:42:55.030Z","slug":"CVE-2025-27053","body":"## Overview\n\nMemory corruption during PlayReady APP usecase while processing TA commands.\n\n## Affected\n\n- `315_5g_iot_modem_firmware`\n- `9205_lte_modem_firmware`\n- `mdm9650_firmware`\n- `msm8996au_firmware`\n- `pm8937_firmware`\n- `qam8255p_firmware`\n- `qam8295p_firmware`\n- `qam8620p_firmware`\n- `qam8650p_firmware`\n- `qam8775p_firmware`\n- `qamsrv1h_firmware`\n- `qamsrv1m_firmware`\n- `qca4004_firmware`\n- `qca6174a_firmware`\n- `qca6234_firmware`\n- `qca6310_firmware`\n- `qca6320_firmware`\n- `qca6335_firmware`\n- `qca6391_firmware`\n- `qca6420_firmware`\n- `qca6421_firmware`\n- `sd730_firmware`\n- `sd820_firmware`\n- `sd821_firmware`\n- `sd855_firmware`\n- `sd865_5g_firmware`\n- `sd888_firmware`\n- `sdm429w_firmware`\n- `sdx55_firmware`\n- `sdx61_firmware`\n- `sdx82_firmware`\n- `sdx85_firmware`\n- `sg4150p_firmware`\n- `sg6150_firmware`\n- `sg6150p_firmware`\n- `mdm9640_firmware`\n- `mdm9628_firmware`\n- `mdm9250_firmware`\n- `mdm9205s_firmware`\n- `mdm8207_firmware`\n- `home_hub_100_platform_firmware`\n- `flight_rb5_5g_platform_firmware`\n- `fastconnect_7800_firmware`\n- `fastconnect_6900_firmware`\n- `fastconnect_6800_firmware`\n- `fastconnect_6700_firmware`\n- `fastconnect_6200_firmware`\n- `csrb31024_firmware`\n- `csra6640_firmware`\n- `csra6620_firmware`\n- `c-v2x_9150_firmware`\n- `ar8035_firmware`\n- `ar8031_firmware`\n- `aqt1000_firmware`\n- `apq8064au_firmware`\n- `apq8037_firmware`\n- `apq8017_firmware`\n- `9207_lte_modem_firmware`\n- `9206_lte_modem_firmware`\n- `sg8275p_firmware`\n- `sm4125_firmware`\n- `sm4635_firmware`\n- `sm6225p_firmware`\n- `sm6250_firmware`\n- `sm6250p_firmware`\n- `sm6370_firmware`\n- `sm6650_firmware`\n- `sm6650p_firmware`\n- `sm7250p_firmware`\n- `sm7315_firmware`\n- `sm7325p_firmware`\n- `sm7635_firmware`\n- `sm7635p_firmware`\n- `sm7675_firmware`\n- `sm7675p_firmware`\n- `sm8550p_firmware`\n- `sm8635_firmware`\n- `sm8635p_firmware`\n- `sm8650q_firmware`\n- `sm8735_firmware`\n- `sm8750_firmware`\n- `sm8750p_firmware`\n- `sm8850_firmware`\n- `sm8850p_firmware`\n- `smart_audio_400_platform_firmware`\n- `qca6426_firmware`\n- `qca6430_firmware`\n- `qca6431_firmware`\n- `qca6436_firmware`\n- `qca6564_firmware`\n- `qca6564a_firmware`\n- `qca6564au_firmware`\n- `qca6574_firmware`\n- `qca6574a_firmware`\n- `qca6574au_firmware`\n- `qca6584au_firmware`\n- `qca6595_firmware`\n- `qca6595au_firmware`\n- `qca6678aq_firmware`\n- `qca6688aq_firmware`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}