CVE-2025-27038
HIGH CISA KEVDescription
Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.
Is your site exposed to CVE-2025-27038?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
CISA Known Exploited Vulnerability
This vulnerability is actively exploited in the wild.
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| qualcomm | ar8031_firmware |
| qualcomm | ar8031 |
| qualcomm | csra6620_firmware |
| qualcomm | csra6620 |
| qualcomm | csra6640_firmware |
| qualcomm | csra6640 |
| qualcomm | fastconnect_7800_firmware |
| qualcomm | fastconnect_7800 |
| qualcomm | qca2066_firmware |
| qualcomm | qca2066 |
| qualcomm | qca6391_firmware |
| qualcomm | qca6391 |
| qualcomm | qcm6125_firmware |
| qualcomm | qcm6125 |
| qualcomm | qcm8550_firmware |
| qualcomm | qcm8550 |
| qualcomm | qcn9011_firmware |
| qualcomm | qcn9011 |
| qualcomm | qcn9012_firmware |
| qualcomm | qcn9012 |
| qualcomm | qcs6125_firmware |
| qualcomm | qcs6125 |
| qualcomm | qcs8550_firmware |
| qualcomm | qcs8550 |
| qualcomm | video_collaboration_vc1_platform_firmware |
| qualcomm | video_collaboration_vc1_platform |
| qualcomm | sm6475_firmware |
| qualcomm | sm6475 |
| qualcomm | sm6650_firmware |
| qualcomm | sm6650 |
| qualcomm | sm6650p_firmware |
| qualcomm | sm6650p |
| qualcomm | sm7435_firmware |
| qualcomm | sm7435 |
| qualcomm | sm7635_firmware |
| qualcomm | sm7635 |
| qualcomm | sm7635p_firmware |
| qualcomm | sm7635p |
| qualcomm | smart_audio_400_platform_firmware |
| qualcomm | smart_audio_400_platform |
| qualcomm | snapdragon_4_gen_2_mobile_platform_firmware |
| qualcomm | snapdragon_4_gen_2_mobile_platform |
| qualcomm | snapdragon_6_gen_1_mobile_platform_firmware |
| qualcomm | snapdragon_6_gen_1_mobile_platform |
| qualcomm | snapdragon_680_4g_mobile_platform_firmware |
| qualcomm | snapdragon_680_4g_mobile_platform |
| qualcomm | snapdragon_685_4g_mobile_platform_\(sm6225-ad\)_firmware |
| qualcomm | snapdragon_685_4g_mobile_platform_\(sm6225-ad\) |
| qualcomm | snapdragon_w5\+_gen_1_wearable_platform_firmware |
| qualcomm | snapdragon_w5\+_gen_1_wearable_platform |
| qualcomm | sw5100_firmware |
| qualcomm | sw5100 |
| qualcomm | sw5100p_firmware |
| qualcomm | sw5100p |
| qualcomm | wcd9335_firmware |
| qualcomm | wcd9335 |
| qualcomm | wcd9370_firmware |
| qualcomm | wcd9370 |
| qualcomm | wcd9375_firmware |
| qualcomm | wcd9375 |
| qualcomm | wcd9378_firmware |
| qualcomm | wcd9378 |
| qualcomm | wcd9385_firmware |
| qualcomm | wcd9385 |
| qualcomm | wcd9395_firmware |
| qualcomm | wcd9395 |
| qualcomm | wcn3950_firmware |
| qualcomm | wcn3950 |
| qualcomm | wcn3980_firmware |
| qualcomm | wcn3980 |
| qualcomm | wcn3988_firmware |
| qualcomm | wcn3988 |
| qualcomm | wcn6650_firmware |
| qualcomm | wcn6650 |
| qualcomm | wcn6740_firmware |
| qualcomm | wcn6740 |
| qualcomm | wcn6755_firmware |
| qualcomm | wcn6755 |
| qualcomm | wsa8810_firmware |
| qualcomm | wsa8810 |
| qualcomm | wsa8815_firmware |
| qualcomm | wsa8815 |
| qualcomm | wsa8830_firmware |
| qualcomm | wsa8830 |
| qualcomm | wsa8832_firmware |
| qualcomm | wsa8832 |
| qualcomm | wsa8835_firmware |
| qualcomm | wsa8835 |
References
Frequently Asked Questions
What is CVE-2025-27038? +
How severe is CVE-2025-27038? +
What products are affected by CVE-2025-27038? +
How do I check if I'm vulnerable to CVE-2025-27038? +
Related Vulnerabilities
A heap use-after-free existed when importing the blank-width characters of an ODF number format. A position value read from the …
rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice …
XZ Utils provide a general-purpose data-compression library plus command-line tools. In XZ Utils 5.3.3alpha to 5.8.0, the multithreaded .xz decoder …
c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in read_answers() when process_answer() may re-enqueue …
There is an issue in CPython when using `bytes.decode("unicode_escape", error="ignore|replace")`. If you are not using the "unicode_escape" encoding or an …
There is a "Use After Free" vulnerability in Qt's QHttp2ProtocolHandler in the QtNetwork module. This only affects HTTP/2 handling, HTTP …