PT-2025-44921 · Unknown · Coreservices

Published 2025-11-04 · Updated 2025-11-05 · CVE-2025-27064

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions Core Services (affected versions not specified)

Description An information disclosure issue exists when registering commands from clients using diag through diagHal. The issue involves a buffer over-read.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Over-read

Weakness Enumeration

CWE-126

Related Identifiers

CVE-2025-27064

Affected Products

Coreservices

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-27064 · Security Note
• https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2025-bulletin.html · Vendor Advisory
• https://t.me/cveNotify/141485 · Telegram Post
• https://t.me/CVEtracker/36462 · Telegram Post
• https://t.me/cveNotify/141819 · Telegram Post