CVE-2025-27038

HighCVSS 7.5/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAR8031; CSRA6620; CSRA6640; FastConnect 7800; QCA2066; QCA6391; QCM6125; QCM8550; QCN9011; QCN9012; QCS6125; QCS8550; Qualcommr Video Collaboration VC1 Platform; SM6475; SM6650; SM6650P; SM7435; SM7635; SM7635P; Smart Audio 400 Platform

References

Timeline

Published
Jun 3, 2025
Last modified
Jun 17, 2026
Added to CISA KEV
Jun 3, 2025
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-270396.6Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request.CVE-2025-27047.5OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting CVE-2025-270406.5Information disclosure may occur while processing the hypervisor log.CVE-2025-270415.5Transient DOS while processing video packets received from video firmware.CVE-2025-270427.8Memory corruption while processing video packets received from video firmware.CVE-2025-270437.8Memory corruption while processing manipulated payload in video firmware.CVE-2025-270447.8Memory corruption while executing timestamp video decode command with large input values.CVE-2025-270456.1Information disclosure while processing batch command execution in Video driver.CVE-2025-270467.8Memory corruption while processing multiple simultaneous escape calls.CVE-2025-270477.8Memory corruption while processing the TESTPATTERNCONFIG escape path.CVE-2025-270487.8Memory corruption while processing camera platform driver IOCTL calls.CVE-2025-270495.5Transient DOS while processing IOCTL call for image encoding.
CVE-2025-27038: High severity, CVSS 7.5 | Vulnix