CVE-2025-27038
Use After Free in Graphics
Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Use After Free in Graphics
Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.
- Record
CVE-2025-27038- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
EUVDEUVD-2025-16700
Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.
- Record
EUVD-2025-16700- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-h454-pc9h-rvh2
Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.
Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.
- Record
GHSA-h454-pc9h-rvh2- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
CISA KEV No score
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Multiple Qualcomm chipsets contain a use-after-free vulnerability. This vulnerability allows for memory corruption while rendering graphics using Adreno GPU drivers in Chrome.
- Record
CVE-2025-27038- Weakness
- CWE-416
- Updated
- 2026-11-02
NVD
Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.
- Record
CVE-2025-27038- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
Affected products
- qualcomm ar8031 firmware
- qualcomm csra6620 firmware
- qualcomm csra6640 firmware
- qualcomm fastconnect 7800 firmware
- qualcomm multiple chipsets
- qualcomm qca2066 firmware
- qualcomm qca6391 firmware
- qualcomm qcm6125 firmware
- qualcomm qcm8550 firmware
- qualcomm qcn9011 firmware
- qualcomm qcn9012 firmware
- qualcomm qcs6125 firmware
Show 34 moreShow less
- qualcomm qcs8550 firmware
- qualcomm sm6475 firmware
- qualcomm sm6650 firmware
- qualcomm sm6650p firmware
- qualcomm sm7435 firmware
- qualcomm sm7635 firmware
- qualcomm sm7635p firmware
- qualcomm smart audio 400 platform firmware
- qualcomm snapdragon 4 gen 2 mobile platform firmware
- qualcomm snapdragon 680 4g mobile platform firmware
- qualcomm snapdragon 685 4g mobile platform \(sm6225-ad\) firmware
- qualcomm snapdragon 6 gen 1 mobile platform firmware
- qualcomm snapdragon w5\+ gen 1 wearable platform firmware
- qualcomm sw5100 firmware
- qualcomm sw5100p firmware
- qualcomm video collaboration vc1 platform firmware
- qualcomm wcd9335 firmware
- qualcomm wcd9370 firmware
- qualcomm wcd9375 firmware
- qualcomm wcd9378 firmware
- qualcomm wcd9385 firmware
- qualcomm wcd9395 firmware
- qualcomm wcn3950 firmware
- qualcomm wcn3980 firmware
- qualcomm wcn3988 firmware
- qualcomm wcn6650 firmware
- qualcomm wcn6740 firmware
- qualcomm wcn6755 firmware
- qualcomm wsa8810 firmware
- qualcomm wsa8815 firmware
- qualcomm wsa8830 firmware
- qualcomm wsa8832 firmware
- qualcomm wsa8835 firmware
- qualcomm, inc. snapdragon
Affected packages
| Package | Affected | Fixed |
|---|---|---|
:unknown:Android |
SoCVersion:0 up to SoCVersion:2025-08-05, plus listed versions SoCVersion |
SoCVersion:2025-08-05 |
History
| Recorded | Changed | Sources |
|---|---|---|
| exploitation | ||
| first indexed | CVE List, EUVD, GitHub Advisories, CISA KEV, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-27038 is a high vulnerability (CVSS 7.5) in Qualcomm Ar8031 Firmware, published June 3, 2025. CISA lists it as known to be exploited, since June 3, 2025. EUVD reports exploitation since June 3, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.04%, the 64th percentile. Fixed in :unknown: SoCVersion:2025-08-05.