What’s Vulnerable › Vulnerabilities
CVE-2025-27038: Qualcomm Multiple Chipsets Use-After-Free Vulnerability
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: yes — in CISA KEV since 2025-06-03
- EPSS: 1.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-06-03 · updated 2026-06-17
- Weakness: CWE-416
Description
Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.
Affected products
- Qualcomm Ar8031 Firmware: all versions
- Qualcomm Csra6620 Firmware: all versions
- Qualcomm Csra6640 Firmware: all versions
- Qualcomm Fastconnect 7800 Firmware: all versions
- Qualcomm Qca2066 Firmware: all versions
- Qualcomm Qca6391 Firmware: all versions
- Qualcomm Qcm6125 Firmware: all versions
- Qualcomm Qcm8550 Firmware: all versions
- Qualcomm Qcn9011 Firmware: all versions
- Qualcomm Qcn9012 Firmware: all versions
- Qualcomm Qcs6125 Firmware: all versions
- Qualcomm Qcs8550 Firmware: all versions
- Qualcomm Sm6475 Firmware: all versions
- Qualcomm Sm6650 Firmware: all versions
- Qualcomm Sm6650P Firmware: all versions
- Qualcomm Sm7435 Firmware: all versions
- Qualcomm Sm7635 Firmware: all versions
- Qualcomm Sm7635P Firmware: all versions
- Qualcomm Smart Audio 400 Platform Firmware: all versions
- Qualcomm Snapdragon 4 Gen 2 Mobile Platform Firmware: all versions
- Qualcomm Snapdragon 680 4G Mobile Platform Firmware: all versions
- Qualcomm Snapdragon 685 4G Mobile Platform (Sm6225-Ad) Firmware: all versions
- Qualcomm Snapdragon 6 Gen 1 Mobile Platform Firmware: all versions
- Qualcomm Snapdragon W5+ Gen 1 Wearable Platform Firmware: all versions
- Qualcomm Sw5100 Firmware: all versions
- Qualcomm Sw5100P Firmware: all versions
- Qualcomm Video Collaboration Vc1 Platform Firmware: all versions
- Qualcomm Wcd9335 Firmware: all versions
- Qualcomm Wcd9370 Firmware: all versions
- Qualcomm Wcd9375 Firmware: all versions
References
- https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-27038
Get alerted when CVE-2025-27038 or the next vulnerability affects your stack