{"id":"CVE-2025-27038","aliases":["4080397","A-418032173","ASB-A-418032173","EUVD-2025-16700","GHSA-h454-pc9h-rvh2"],"status":"published","title":"Use After Free in Graphics","description":"Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.01044,"percentile":0.64573,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2025-06-03T05:53:06Z","modified":"2026-10-30T16:11:27Z","kev":{"date_added":"2025-06-03","due_date":"2025-06-24","required_action":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2025-06-03"},{"source":"kev","since":"2025-06-03"}],"fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["SoCVersion:2025-08-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2025-08-05"}]}],"versions":["SoCVersion"]}],"products":[{"vendor":"qualcomm","product":"ar8031_firmware"},{"vendor":"qualcomm","product":"csra6620_firmware"},{"vendor":"qualcomm","product":"csra6640_firmware"},{"vendor":"qualcomm","product":"fastconnect_7800_firmware"},{"vendor":"qualcomm","product":"multiple chipsets"},{"vendor":"qualcomm","product":"qca2066_firmware"},{"vendor":"qualcomm","product":"qca6391_firmware"},{"vendor":"qualcomm","product":"qcm6125_firmware"},{"vendor":"qualcomm","product":"qcm8550_firmware"},{"vendor":"qualcomm","product":"qcn9011_firmware"},{"vendor":"qualcomm","product":"qcn9012_firmware"},{"vendor":"qualcomm","product":"qcs6125_firmware"},{"vendor":"qualcomm","product":"qcs8550_firmware"},{"vendor":"qualcomm","product":"sm6475_firmware"},{"vendor":"qualcomm","product":"sm6650_firmware"},{"vendor":"qualcomm","product":"sm6650p_firmware"},{"vendor":"qualcomm","product":"sm7435_firmware"},{"vendor":"qualcomm","product":"sm7635_firmware"},{"vendor":"qualcomm","product":"sm7635p_firmware"},{"vendor":"qualcomm","product":"smart_audio_400_platform_firmware"},{"vendor":"qualcomm","product":"snapdragon_4_gen_2_mobile_platform_firmware"},{"vendor":"qualcomm","product":"snapdragon_680_4g_mobile_platform_firmware"},{"vendor":"qualcomm","product":"snapdragon_685_4g_mobile_platform_\\(sm6225-ad\\)_firmware"},{"vendor":"qualcomm","product":"snapdragon_6_gen_1_mobile_platform_firmware"},{"vendor":"qualcomm","product":"snapdragon_w5\\+_gen_1_wearable_platform_firmware"},{"vendor":"qualcomm","product":"sw5100_firmware"},{"vendor":"qualcomm","product":"sw5100p_firmware"},{"vendor":"qualcomm","product":"video_collaboration_vc1_platform_firmware"},{"vendor":"qualcomm","product":"wcd9335_firmware"},{"vendor":"qualcomm","product":"wcd9370_firmware"},{"vendor":"qualcomm","product":"wcd9375_firmware"},{"vendor":"qualcomm","product":"wcd9378_firmware"},{"vendor":"qualcomm","product":"wcd9385_firmware"},{"vendor":"qualcomm","product":"wcd9395_firmware"},{"vendor":"qualcomm","product":"wcn3950_firmware"},{"vendor":"qualcomm","product":"wcn3980_firmware"},{"vendor":"qualcomm","product":"wcn3988_firmware"},{"vendor":"qualcomm","product":"wcn6650_firmware"},{"vendor":"qualcomm","product":"wcn6740_firmware"},{"vendor":"qualcomm","product":"wcn6755_firmware"},{"vendor":"qualcomm","product":"wsa8810_firmware"},{"vendor":"qualcomm","product":"wsa8815_firmware"},{"vendor":"qualcomm","product":"wsa8830_firmware"},{"vendor":"qualcomm","product":"wsa8832_firmware"},{"vendor":"qualcomm","product":"wsa8835_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon"}],"references":[{"url":"https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-27038","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27038"},{"url":"https://github.com/advisories/GHSA-h454-pc9h-rvh2"},{"url":"https://source.android.com/security/bulletin/2025-08-01","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-27038","title":"Use After Free in Graphics","description":"Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.","status":"published","published":"2025-06-03T05:53:06.692Z","modified":"2026-02-26T18:27:39.591Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:32:42.411662Z"}],"euvd":[{"id":"EUVD-2025-16700","description":"Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.","status":"published","published":"2025-06-03T05:53:06Z","modified":"2026-02-26T18:27:39Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2025-06-03","updated_at":"2026-11-02T19:48:18.619892Z"}],"ghsa":[{"id":"GHSA-h454-pc9h-rvh2","title":"Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.","description":"Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.","status":"published","published":"2025-06-03T06:31:15Z","modified":"2025-10-22T00:34:26Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:04:09.266545Z"}],"kev":[{"id":"CVE-2025-27038","title":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","description":"Multiple Qualcomm chipsets contain a use-after-free vulnerability. This vulnerability allows for memory corruption while rendering graphics using Adreno GPU drivers in Chrome.","cwes":["CWE-416"],"kev":{"date_added":"2025-06-03","due_date":"2025-06-24","required_action":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:15.999436Z"}],"nvd":[{"id":"CVE-2025-27038","description":"Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.","status":"published","published":"2025-06-03T06:15:27.133Z","modified":"2026-06-17T09:02:48.833Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:11:10.143444Z"}],"osv":[{"id":"ASB-A-418032173","status":"published","published":"2025-08-01T00:00:00Z","modified":"2026-11-10T17:02:23.040266809Z","updated_at":"2026-11-09T17:05:18.698671Z"}]}}