All vulnerabilities
CVE-2025-27038

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Qualcomm Multiple Chipsets
Open in ThreatlineRecord JSON
CVSS
7.5High
ExploitationExploited in the wildAdded to KEV 3 Jun 2025CISA KEV
Exploit odds (EPSS)1.02%Chance of exploitation activity in the next 30 days, higher than 63% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Federal deadline24 Jun 2025Remediation due date for US federal agenciesCISA KEV
CISA required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. CISA KEV

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Timeline

  1. 3 Jun 2025, 05:53 UTCPublishedCVE List
  2. 3 Jun 2025Added to CISA KEVCISA KEV

Description

Multiple Qualcomm chipsets contain a use-after-free vulnerability. This vulnerability allows for memory corruption while rendering graphics using Adreno GPU drivers in Chrome.

Text from CVE List

Affected versions 30

  • Snapdragonaffected: AR8031CVE List
  • Snapdragonaffected: CSRA6620CVE List
  • Snapdragonaffected: CSRA6640CVE List
  • Snapdragonaffected: FastConnect 7800CVE List
  • Snapdragonaffected: QCA2066CVE List
  • Snapdragonaffected: QCA6391CVE List
  • Snapdragonaffected: QCM6125CVE List
  • Snapdragonaffected: QCM8550CVE List
  • Snapdragonaffected: QCN9011CVE List
  • Snapdragonaffected: QCN9012CVE List
  • Snapdragonaffected: QCS6125CVE List
  • Snapdragonaffected: QCS8550CVE List
  • Snapdragonaffected: Qualcommr Video Collaboration VC1 PlatformCVE List
  • Snapdragonaffected: SM6475CVE List
  • Snapdragonaffected: SM6650CVE List
  • Snapdragonaffected: SM6650PCVE List
  • Snapdragonaffected: SM7435CVE List
  • Snapdragonaffected: SM7635CVE List
  • Snapdragonaffected: SM7635PCVE List
  • Snapdragonaffected: Smart Audio 400 PlatformCVE List
  • Snapdragonaffected: Snapdragon 4 Gen 2 Mobile PlatformCVE List
  • Snapdragonaffected: Snapdragon 6 Gen 1 Mobile PlatformCVE List
  • Snapdragonaffected: Snapdragon 680 4G Mobile PlatformCVE List
  • Snapdragonaffected: Snapdragon 685 4G Mobile Platform (SM6225-AD)CVE List
  • Snapdragonaffected: Snapdragon W5+ Gen 1 Wearable PlatformCVE List
  • Snapdragonaffected: SW5100CVE List
  • Snapdragonaffected: SW5100PCVE List
  • Snapdragonaffected: WCD9335CVE List
  • Snapdragonaffected: WCD9370CVE List
  • Snapdragonaffected: WCD9375CVE List

References 3