CVE-2025-27038
HighActively exploited (CISA KEV)
Description
Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Qualcomm Multiple Chipsets
PublishedJun 3, 2025
First seenJun 3, 2025
Added to KEVJun 3, 2025
Weakness typeCWE-416Use after free
How to fix
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CISA due date: Jun 24, 2025Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qualcomm ar8031_firmware | No range specified | — |
| qualcomm csra6620_firmware | No range specified | — |
| qualcomm csra6640_firmware | No range specified | — |
| qualcomm fastconnect_7800_firmware | No range specified | — |
| qualcomm qca2066_firmware | No range specified | — |
| qualcomm qca6391_firmware | No range specified | — |
| qualcomm qcm6125_firmware | No range specified | — |
| qualcomm qcm8550_firmware | No range specified | — |
| qualcomm qcn9011_firmware | No range specified | — |
| qualcomm qcn9012_firmware | No range specified | — |
| qualcomm qcs6125_firmware | No range specified | — |
| qualcomm qcs8550_firmware | No range specified | — |
| qualcomm video_collaboration_vc1_platform_firmware | No range specified | — |
| qualcomm sm6475_firmware | No range specified | — |
| qualcomm sm6650_firmware | No range specified | — |
| qualcomm sm6650p_firmware | No range specified | — |
| qualcomm sm7435_firmware | No range specified | — |
| qualcomm sm7635_firmware | No range specified | — |
| qualcomm sm7635p_firmware | No range specified | — |
| qualcomm smart_audio_400_platform_firmware | No range specified | — |
| qualcomm snapdragon_4_gen_2_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_6_gen_1_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_680_4g_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_685_4g_mobile_platform_\(sm6225-ad\)_firmware | No range specified | — |
| qualcomm snapdragon_w5\+_gen_1_wearable_platform_firmware | No range specified | — |
| qualcomm sw5100_firmware | No range specified | — |
| qualcomm sw5100p_firmware | No range specified | — |
| qualcomm wcd9335_firmware | No range specified | — |
| qualcomm wcd9370_firmware | No range specified | — |
| qualcomm wcd9375_firmware | No range specified | — |
| qualcomm wcd9378_firmware | No range specified | — |
| qualcomm wcd9385_firmware | No range specified | — |
| qualcomm wcd9395_firmware | No range specified | — |
| qualcomm wcn3950_firmware | No range specified | — |
| qualcomm wcn3980_firmware | No range specified | — |
| qualcomm wcn3988_firmware | No range specified | — |
| qualcomm wcn6650_firmware | No range specified | — |
| qualcomm wcn6740_firmware | No range specified | — |
| qualcomm wcn6755_firmware | No range specified | — |
| qualcomm wsa8810_firmware | No range specified | — |
| qualcomm wsa8815_firmware | No range specified | — |
| qualcomm wsa8830_firmware | No range specified | — |
| qualcomm wsa8832_firmware | No range specified | — |
| qualcomm wsa8835_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.