peter bassill · operator
$ cve CVE-2025-27038 JSON

CVE-2025-27038 KEV

7.5
HIGH · CVSS 3.1 · EPSS 1% (pctl 62)

Patch first

On CISA KEV — known exploited in the wild, due 2025-06-24.

Description

Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.

Scoring

CVSS7.5 (HIGH, v3.1)
VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS1.02% — more likely to be exploited than 62% of all CVEs
WeaknessCWE-416
On CISA KEVyes — remediate by 2025-06-24
Public exploitnone known
Published2025-06-03
Last modified2026-06-17

CISA KEV

NameQualcomm Multiple Chipsets Use-After-Free Vulnerability
Added2025-06-03
Due2025-06-24
Vendor / productQualcomm / Multiple Chipsets
Ransomware usenone reported

Affected (40)

VendorProduct
qualcommar8031
qualcommar8031 firmware
qualcommcsra6620
qualcommcsra6620 firmware
qualcommcsra6640
qualcommcsra6640 firmware
qualcommfastconnect 7800
qualcommfastconnect 7800 firmware
qualcommqca2066
qualcommqca2066 firmware
qualcommqca6391
qualcommqca6391 firmware
qualcommqcm6125
qualcommqcm6125 firmware
qualcommqcm8550
qualcommqcm8550 firmware
qualcommqcn9011
qualcommqcn9011 firmware
qualcommqcn9012
qualcommqcn9012 firmware
qualcommqcs6125
qualcommqcs6125 firmware
qualcommqcs8550
qualcommqcs8550 firmware
qualcommsm6475
qualcommsm6475 firmware
qualcommsm6650
qualcommsm6650 firmware
qualcommsm6650p
qualcommsm6650p firmware
qualcommsm7435
qualcommsm7435 firmware
qualcommsm7635
qualcommsm7635 firmware
qualcommsm7635p
qualcommsm7635p firmware
qualcommsmart audio 400 platform
qualcommsmart audio 400 platform firmware
qualcommvideo collaboration vc1 platform
qualcommvideo collaboration vc1 platform firmware

References

→ the Explorer  ·  watch your stack  ·  NVD