CVEvulnerability
CVE-2025-27038
CISA Known Exploited Vulnerability
Qualcomm Multiple Chipsets Use-After-Free Vulnerability — Qualcomm Multiple Chipsets
Multiple Qualcomm chipsets contain a use-after-free vulnerability. This vulnerability allows for memory corruption while rendering graphics using Adreno GPU drivers in Chrome.
- Added to KEV
- 2025-06-03
- Remediation due
- 2025-06-24
- Ransomware use
- Unknown
- Required action
- Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Notes
- Please check with specific vendors (OEMs,) for information on patching status. For more information, please see: https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-27038
- Status
- Analyzed
- Published
- 2025-06-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-416
Description
Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.
Affected configurations
• qualcomm ar8031 firmware
• qualcomm csra6620 firmware
• qualcomm csra6640 firmware
• qualcomm fastconnect 7800 firmware
• qualcomm qca2066 firmware
• qualcomm qca6391 firmware
• qualcomm qcm6125 firmware
• qualcomm qcm8550 firmware
• qualcomm qcn9011 firmware
• qualcomm qcn9012 firmware
• qualcomm qcs6125 firmware
• qualcomm qcs8550 firmware
• qualcomm video collaboration vc1 platform firmware
• qualcomm sm6475 firmware
• qualcomm sm6650 firmware
• qualcomm sm6650p firmware
• qualcomm sm7435 firmware
• qualcomm sm7635 firmware
• qualcomm sm7635p firmware
• qualcomm smart audio 400 platform firmware
• qualcomm snapdragon 4 gen 2 mobile platform firmware
• qualcomm snapdragon 6 gen 1 mobile platform firmware
• qualcomm snapdragon 680 4g mobile platform firmware
• qualcomm snapdragon 685 4g mobile platform \(sm6225-ad\) firmware
• qualcomm snapdragon w5\+ gen 1 wearable platform firmware
• qualcomm sw5100 firmware
• qualcomm sw5100p firmware
• qualcomm wcd9335 firmware
• qualcomm wcd9370 firmware
• qualcomm wcd9375 firmware
• qualcomm wcd9378 firmware
• qualcomm wcd9385 firmware
• qualcomm wcd9395 firmware
• qualcomm wcn3950 firmware
• qualcomm wcn3980 firmware
• qualcomm wcn3988 firmware
• qualcomm wcn6650 firmware
• qualcomm wcn6740 firmware
• qualcomm wcn6755 firmware
• qualcomm wsa8810 firmware
• qualcomm wsa8815 firmware
• qualcomm wsa8830 firmware
• qualcomm wsa8832 firmware
• qualcomm wsa8835 firmware
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness