---
id: CVE-2025-27059
title: Memory corruption while performing SCM call.
summary: Memory corruption while performing SCM call.
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'
cwe:
  - CWE-823
vendor: qualcomm
product: immersive_home_214_platform_firmware
affected:
  - immersive_home_214_platform_firmware
  - immersive_home_216_platform_firmware
  - immersive_home_316_platform_firmware
  - immersive_home_318_platform_firmware
  - ipq5010_firmware
  - ipq5028_firmware
  - qcn6023_firmware
  - qcn6024_firmware
  - qcn6100_firmware
  - qcn6102_firmware
  - qcn6112_firmware
  - qcn6122_firmware
  - qcn6132_firmware
  - qcn9000_firmware
  - qcn9001_firmware
  - qcn9002_firmware
  - qcn9003_firmware
  - qcn9012_firmware
  - qcn9022_firmware
  - qcn9024_firmware
  - qcn9070_firmware
  - qcn9072_firmware
  - qcn9074_firmware
  - qcn9100_firmware
  - qcn9274_firmware
published: '2025-10-09'
updated: '2026-09-30'
sourceUpdated: '2026-09-30T23:10:00.237'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-27059'
references:
  - url: >-
      https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
    label: product-security@qualcomm.com
tags:
  - nvd
epss: 0.00088
epssPercentile: 0.0037
ingestedAt: '2026-09-30T23:29:32.420Z'
---

## Overview

Memory corruption while performing SCM call.

## Affected

- `immersive_home_214_platform_firmware`
- `immersive_home_216_platform_firmware`
- `immersive_home_316_platform_firmware`
- `immersive_home_318_platform_firmware`
- `ipq5010_firmware`
- `ipq5028_firmware`
- `qcn6023_firmware`
- `qcn6024_firmware`
- `qcn6100_firmware`
- `qcn6102_firmware`
- `qcn6112_firmware`
- `qcn6122_firmware`
- `qcn6132_firmware`
- `qcn9000_firmware`
- `qcn9001_firmware`
- `qcn9002_firmware`
- `qcn9003_firmware`
- `qcn9012_firmware`
- `qcn9022_firmware`
- `qcn9024_firmware`
- `qcn9070_firmware`
- `qcn9072_firmware`
- `qcn9074_firmware`
- `qcn9100_firmware`
- `qcn9274_firmware`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.