CVE-2025-27043

Successful exploitation can corrupt video-firmware memory, causing denial of service or potentially allowing an attacker to alter control-flow-relevant data or other adjacent structures. This may provide arbitrary code execution in the affected processing context, potential privilege escalation, and possible disclosure of sensitive data.

Until firmware updates are deployed, reduce processing of untrusted or unsolicited video content, restrict installation and execution of untrusted applications, and limit use of unpatched devices in sensitive environments. Use mobile-device management and vendor update compliance monitoring to identify and prioritize exposed devices.

Apply the Qualcomm firmware fixes released in the July 2025 Qualcomm security bulletin, including any corresponding device-manufacturer or OEM security update. Verify that deployed device firmware incorporates the applicable Qualcomm patch level.