First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-27038

HighCVSS 7.5/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	AR8031; CSRA6620; CSRA6640; FastConnect 7800; QCA2066; QCA6391; QCM6125; QCM8550; QCN9011; QCN9012; QCS6125; QCS8550; Qualcommr Video Collaboration VC1 Platform; SM6475; SM6650; SM6650P; SM7435; SM7635; SM7635P; Smart Audio 400 Platform

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.htmlVendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-27038US Government Resource

Timeline

Published: Jun 3, 2025
Last modified: Jun 17, 2026
Added to CISA KEV: Jun 3, 2025
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-270396.6Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request.CVE-2025-27047.5OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting CVE-2025-270406.5Information disclosure may occur while processing the hypervisor log.CVE-2025-270415.5Transient DOS while processing video packets received from video firmware.CVE-2025-270427.8Memory corruption while processing video packets received from video firmware.CVE-2025-270437.8Memory corruption while processing manipulated payload in video firmware.CVE-2025-270447.8Memory corruption while executing timestamp video decode command with large input values.CVE-2025-270456.1Information disclosure while processing batch command execution in Video driver.CVE-2025-270467.8Memory corruption while processing multiple simultaneous escape calls.CVE-2025-270477.8Memory corruption while processing the TESTPATTERNCONFIG escape path.CVE-2025-270487.8Memory corruption while processing camera platform driver IOCTL calls.CVE-2025-270495.5Transient DOS while processing IOCTL call for image encoding.