Back to CVE records
High 7.5Known exploited (CISA KEV)Published Jun 3, 2025
CVE-2025-27038Use After Free in Graphics
Updated under an hour ago ()
Does this affect you?
It affects Qualcomm, Inc. Snapdragon and 44 other products. Add what you run to find out whether that includes you.
CISA lists it as known exploited since Jun 3, 2025; federal agencies had to remediate by Jun 24, 2025. Treat that date as your deadline.
Do this next
Start free and add your stack
Free account, 1 product
Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.
- CVSS
- 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-416
- Known exploited
- Added to CISA KEV Jun 3, 2025; federal remediation due Jun 24, 2025Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- EPSS (exploitation in the next 30 days)
- 1.02% (percentile 63)
- Assigned by
- qualcomm
- NVD analysis
- Analyzed
- Record last updated
- Feb 26, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Qualcomm, Inc. Snapdragon qualcomm:snapdragon (from the name) | AR8031; CSRA6620; CSRA6640; FastConnect 7800; QCA2066; QCA6391; QCM6125; QCM8550; and 36 more ranges | CNA record |
qualcomm ar8031_firmware qualcomm:ar8031_firmware | all versions | NVD |
qualcomm csra6620_firmware qualcomm:csra6620_firmware | all versions | NVD |
qualcomm csra6640_firmware qualcomm:csra6640_firmware | all versions | NVD |
qualcomm fastconnect_7800_firmware qualcomm:fastconnect_7800_firmware | all versions | NVD |
qualcomm qca2066_firmware qualcomm:qca2066_firmware | all versions | NVD |
qualcomm qca6391_firmware qualcomm:qca6391_firmware | all versions | NVD |
qualcomm qcm6125_firmware qualcomm:qcm6125_firmware | all versions | NVD |
qualcomm qcm8550_firmware qualcomm:qcm8550_firmware | all versions | NVD |
qualcomm qcn9011_firmware qualcomm:qcn9011_firmware | all versions | NVD |
qualcomm qcn9012_firmware qualcomm:qcn9012_firmware | all versions | NVD |
qualcomm qcs6125_firmware qualcomm:qcs6125_firmware | all versions | NVD |
qualcomm qcs8550_firmware qualcomm:qcs8550_firmware | all versions | NVD |
qualcomm video_collaboration_vc1_platform_firmware qualcomm:video_collaboration_vc1_platform_firmware | all versions | NVD |
qualcomm sm6475_firmware qualcomm:sm6475_firmware | all versions | NVD |
qualcomm sm6650_firmware qualcomm:sm6650_firmware | all versions | NVD |
qualcomm sm6650p_firmware qualcomm:sm6650p_firmware | all versions | NVD |
qualcomm sm7435_firmware qualcomm:sm7435_firmware | all versions | NVD |
qualcomm sm7635_firmware qualcomm:sm7635_firmware | all versions | NVD |
qualcomm sm7635p_firmware qualcomm:sm7635p_firmware | all versions | NVD |
qualcomm smart_audio_400_platform_firmware qualcomm:smart_audio_400_platform_firmware | all versions | NVD |
qualcomm snapdragon_4_gen_2_mobile_platform_firmware qualcomm:snapdragon_4_gen_2_mobile_platform_firmware | all versions | NVD |
qualcomm snapdragon_6_gen_1_mobile_platform_firmware qualcomm:snapdragon_6_gen_1_mobile_platform_firmware | all versions | NVD |
qualcomm snapdragon_680_4g_mobile_platform_firmware qualcomm:snapdragon_680_4g_mobile_platform_firmware | all versions | NVD |
qualcomm snapdragon_685_4g_mobile_platform_(sm6225-ad)_firmware qualcomm:snapdragon_685_4g_mobile_platform_(sm6225-ad)_firmware | all versions | NVD |
qualcomm snapdragon_w5+_gen_1_wearable_platform_firmware qualcomm:snapdragon_w5+_gen_1_wearable_platform_firmware | all versions | NVD |
qualcomm sw5100_firmware qualcomm:sw5100_firmware | all versions | NVD |
qualcomm sw5100p_firmware qualcomm:sw5100p_firmware | all versions | NVD |
qualcomm wcd9335_firmware qualcomm:wcd9335_firmware | all versions | NVD |
qualcomm wcd9370_firmware qualcomm:wcd9370_firmware | all versions | NVD |
qualcomm wcd9375_firmware qualcomm:wcd9375_firmware | all versions | NVD |
qualcomm wcd9378_firmware qualcomm:wcd9378_firmware | all versions | NVD |
qualcomm wcd9385_firmware qualcomm:wcd9385_firmware | all versions | NVD |
qualcomm wcd9395_firmware qualcomm:wcd9395_firmware | all versions | NVD |
qualcomm wcn3950_firmware qualcomm:wcn3950_firmware | all versions | NVD |
qualcomm wcn3980_firmware qualcomm:wcn3980_firmware | all versions | NVD |
qualcomm wcn3988_firmware qualcomm:wcn3988_firmware | all versions | NVD |
qualcomm wcn6650_firmware qualcomm:wcn6650_firmware | all versions | NVD |
qualcomm wcn6740_firmware qualcomm:wcn6740_firmware | all versions | NVD |
qualcomm wcn6755_firmware qualcomm:wcn6755_firmware | all versions | NVD |
qualcomm wsa8810_firmware qualcomm:wsa8810_firmware | all versions | NVD |
qualcomm wsa8815_firmware qualcomm:wsa8815_firmware | all versions | NVD |
qualcomm wsa8830_firmware qualcomm:wsa8830_firmware | all versions | NVD |
qualcomm wsa8832_firmware qualcomm:wsa8832_firmware | all versions | NVD |
qualcomm wsa8835_firmware qualcomm:wsa8835_firmware | all versions | NVD |
References
- https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.htmlvendor-advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-27038us-government-resource
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.