---
id: CVE-2025-27053
title: Memory corruption during PlayReady APP usecase while processing TA commands.
summary: Memory corruption during PlayReady APP usecase while processing TA commands.
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-131
vendor: qualcomm
product: 315_5g_iot_modem_firmware
affected:
  - 315_5g_iot_modem_firmware
  - 9205_lte_modem_firmware
  - mdm9650_firmware
  - msm8996au_firmware
  - pm8937_firmware
  - qam8255p_firmware
  - qam8295p_firmware
  - qam8620p_firmware
  - qam8650p_firmware
  - qam8775p_firmware
  - qamsrv1h_firmware
  - qamsrv1m_firmware
  - qca4004_firmware
  - qca6174a_firmware
  - qca6234_firmware
  - qca6310_firmware
  - qca6320_firmware
  - qca6335_firmware
  - qca6391_firmware
  - qca6420_firmware
  - qca6421_firmware
  - sd730_firmware
  - sd820_firmware
  - sd821_firmware
  - sd855_firmware
  - sd865_5g_firmware
  - sd888_firmware
  - sdm429w_firmware
  - sdx55_firmware
  - sdx61_firmware
  - sdx82_firmware
  - sdx85_firmware
  - sg4150p_firmware
  - sg6150_firmware
  - sg6150p_firmware
  - mdm9640_firmware
  - mdm9628_firmware
  - mdm9250_firmware
  - mdm9205s_firmware
  - mdm8207_firmware
  - home_hub_100_platform_firmware
  - flight_rb5_5g_platform_firmware
  - fastconnect_7800_firmware
  - fastconnect_6900_firmware
  - fastconnect_6800_firmware
  - fastconnect_6700_firmware
  - fastconnect_6200_firmware
  - csrb31024_firmware
  - csra6640_firmware
  - csra6620_firmware
  - c-v2x_9150_firmware
  - ar8035_firmware
  - ar8031_firmware
  - aqt1000_firmware
  - apq8064au_firmware
  - apq8037_firmware
  - apq8017_firmware
  - 9207_lte_modem_firmware
  - 9206_lte_modem_firmware
  - sg8275p_firmware
  - sm4125_firmware
  - sm4635_firmware
  - sm6225p_firmware
  - sm6250_firmware
  - sm6250p_firmware
  - sm6370_firmware
  - sm6650_firmware
  - sm6650p_firmware
  - sm7250p_firmware
  - sm7315_firmware
  - sm7325p_firmware
  - sm7635_firmware
  - sm7635p_firmware
  - sm7675_firmware
  - sm7675p_firmware
  - sm8550p_firmware
  - sm8635_firmware
  - sm8635p_firmware
  - sm8650q_firmware
  - sm8735_firmware
  - sm8750_firmware
  - sm8750p_firmware
  - sm8850_firmware
  - sm8850p_firmware
  - smart_audio_400_platform_firmware
  - qca6426_firmware
  - qca6430_firmware
  - qca6431_firmware
  - qca6436_firmware
  - qca6564_firmware
  - qca6564a_firmware
  - qca6564au_firmware
  - qca6574_firmware
  - qca6574a_firmware
  - qca6574au_firmware
  - qca6584au_firmware
  - qca6595_firmware
  - qca6595au_firmware
  - qca6678aq_firmware
  - qca6688aq_firmware
published: '2025-10-09'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T13:10:00.200'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-27053'
references:
  - url: >-
      https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
    label: product-security@qualcomm.com
tags:
  - nvd
epss: 0.00087
epssPercentile: 0.00307
ingestedAt: '2026-10-08T13:42:55.030Z'
---

## Overview

Memory corruption during PlayReady APP usecase while processing TA commands.

## Affected

- `315_5g_iot_modem_firmware`
- `9205_lte_modem_firmware`
- `mdm9650_firmware`
- `msm8996au_firmware`
- `pm8937_firmware`
- `qam8255p_firmware`
- `qam8295p_firmware`
- `qam8620p_firmware`
- `qam8650p_firmware`
- `qam8775p_firmware`
- `qamsrv1h_firmware`
- `qamsrv1m_firmware`
- `qca4004_firmware`
- `qca6174a_firmware`
- `qca6234_firmware`
- `qca6310_firmware`
- `qca6320_firmware`
- `qca6335_firmware`
- `qca6391_firmware`
- `qca6420_firmware`
- `qca6421_firmware`
- `sd730_firmware`
- `sd820_firmware`
- `sd821_firmware`
- `sd855_firmware`
- `sd865_5g_firmware`
- `sd888_firmware`
- `sdm429w_firmware`
- `sdx55_firmware`
- `sdx61_firmware`
- `sdx82_firmware`
- `sdx85_firmware`
- `sg4150p_firmware`
- `sg6150_firmware`
- `sg6150p_firmware`
- `mdm9640_firmware`
- `mdm9628_firmware`
- `mdm9250_firmware`
- `mdm9205s_firmware`
- `mdm8207_firmware`
- `home_hub_100_platform_firmware`
- `flight_rb5_5g_platform_firmware`
- `fastconnect_7800_firmware`
- `fastconnect_6900_firmware`
- `fastconnect_6800_firmware`
- `fastconnect_6700_firmware`
- `fastconnect_6200_firmware`
- `csrb31024_firmware`
- `csra6640_firmware`
- `csra6620_firmware`
- `c-v2x_9150_firmware`
- `ar8035_firmware`
- `ar8031_firmware`
- `aqt1000_firmware`
- `apq8064au_firmware`
- `apq8037_firmware`
- `apq8017_firmware`
- `9207_lte_modem_firmware`
- `9206_lte_modem_firmware`
- `sg8275p_firmware`
- `sm4125_firmware`
- `sm4635_firmware`
- `sm6225p_firmware`
- `sm6250_firmware`
- `sm6250p_firmware`
- `sm6370_firmware`
- `sm6650_firmware`
- `sm6650p_firmware`
- `sm7250p_firmware`
- `sm7315_firmware`
- `sm7325p_firmware`
- `sm7635_firmware`
- `sm7635p_firmware`
- `sm7675_firmware`
- `sm7675p_firmware`
- `sm8550p_firmware`
- `sm8635_firmware`
- `sm8635p_firmware`
- `sm8650q_firmware`
- `sm8735_firmware`
- `sm8750_firmware`
- `sm8750p_firmware`
- `sm8850_firmware`
- `sm8850p_firmware`
- `smart_audio_400_platform_firmware`
- `qca6426_firmware`
- `qca6430_firmware`
- `qca6431_firmware`
- `qca6436_firmware`
- `qca6564_firmware`
- `qca6564a_firmware`
- `qca6564au_firmware`
- `qca6574_firmware`
- `qca6574a_firmware`
- `qca6574au_firmware`
- `qca6584au_firmware`
- `qca6595_firmware`
- `qca6595au_firmware`
- `qca6678aq_firmware`
- `qca6688aq_firmware`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.