high7.5Known exploited
CVE-2025-27038
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2025-06-03. Federal due date: 2025-06-24.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Impact
Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qualcomm | Ar8031 Firmware | All versions |
| Qualcomm | Csra6620 Firmware | All versions |
| Qualcomm | Csra6640 Firmware | All versions |
| Qualcomm | Fastconnect 7800 Firmware | All versions |
| Qualcomm | Qca2066 Firmware | All versions |
| Qualcomm | Qca6391 Firmware | All versions |
| Qualcomm | Qcm6125 Firmware | All versions |
| Qualcomm | Qcm8550 Firmware | All versions |
| Qualcomm | Qcn9011 Firmware | All versions |
| Qualcomm | Qcn9012 Firmware | All versions |
| Qualcomm | Qcs6125 Firmware | All versions |
| Qualcomm | Qcs8550 Firmware | All versions |