Lucene search
+L

CVE-2025-27038

๐Ÿ—“๏ธย 03 Jun 2025ย 05:53:06Reported byย qualcommTypeย 
cve
ย cve
๐Ÿ”—ย web.nvd.nist.gov๐Ÿ“ฐ๏ธย 6ย Media mentions๐Ÿ‘ย 319ย Views

Use After Free vulnerability in Chrome affecting Adreno GPU drivers leading to memory corruption.

Related
Detection
Affected
Refs
Social
NVD
Vulners
[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Connectivity",
      "Snapdragon Consumer IOT",
      "Snapdragon Industrial IOT",
      "Snapdragon Mobile",
      "Snapdragon Voice & Music",
      "Snapdragon Wearables"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "AR8031"
      },
      {
        "status": "affected",
        "version": "CSRA6620"
      },
      {
        "status": "affected",
        "version": "CSRA6640"
      },
      {
        "status": "affected",
        "version": "FastConnect 7800"
      },
      {
        "status": "affected",
        "version": "QCA2066"
      },
      {
        "status": "affected",
        "version": "QCA6391"
      },
      {
        "status": "affected",
        "version": "QCM6125"
      },
      {
        "status": "affected",
        "version": "QCM8550"
      },
      {
        "status": "affected",
        "version": "QCN9011"
      },
      {
        "status": "affected",
        "version": "QCN9012"
      },
      {
        "status": "affected",
        "version": "QCS6125"
      },
      {
        "status": "affected",
        "version": "QCS8550"
      },
      {
        "status": "affected",
        "version": "Qualcommr Video Collaboration VC1 Platform"
      },
      {
        "status": "affected",
        "version": "SM6475"
      },
      {
        "status": "affected",
        "version": "SM6650"
      },
      {
        "status": "affected",
        "version": "SM6650P"
      },
      {
        "status": "affected",
        "version": "SM7435"
      },
      {
        "status": "affected",
        "version": "SM7635"
      },
      {
        "status": "affected",
        "version": "SM7635P"
      },
      {
        "status": "affected",
        "version": "Smart Audio 400 Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 4 Gen 2 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 6 Gen 1 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 680 4G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 685 4G Mobile Platform (SM6225-AD)"
      },
      {
        "status": "affected",
        "version": "Snapdragon W5+ Gen 1 Wearable Platform"
      },
      {
        "status": "affected",
        "version": "SW5100"
      },
      {
        "status": "affected",
        "version": "SW5100P"
      },
      {
        "status": "affected",
        "version": "WCD9335"
      },
      {
        "status": "affected",
        "version": "WCD9370"
      },
      {
        "status": "affected",
        "version": "WCD9375"
      },
      {
        "status": "affected",
        "version": "WCD9378"
      },
      {
        "status": "affected",
        "version": "WCD9385"
      },
      {
        "status": "affected",
        "version": "WCD9395"
      },
      {
        "status": "affected",
        "version": "WCN3950"
      },
      {
        "status": "affected",
        "version": "WCN3980"
      },
      {
        "status": "affected",
        "version": "WCN3988"
      },
      {
        "status": "affected",
        "version": "WCN6650"
      },
      {
        "status": "affected",
        "version": "WCN6740"
      },
      {
        "status": "affected",
        "version": "WCN6755"
      },
      {
        "status": "affected",
        "version": "WSA8810"
      },
      {
        "status": "affected",
        "version": "WSA8815"
      },
      {
        "status": "affected",
        "version": "WSA8830"
      },
      {
        "status": "affected",
        "version": "WSA8832"
      },
      {
        "status": "affected",
        "version": "WSA8835"
      }
    ]
  }
]

Action1corp

๐—ง๐—ผ๐—ฑ๐—ฎ๐˜†'๐˜€ ๐—ฃ๐—ฎ๐˜๐—ฐ๐—ต ๐—ง๐˜‚๐—ฒ๐˜€๐—ฑ๐—ฎ๐˜† ๐—ผ๐˜ƒ๐—ฒ๐—ฟ๐˜ƒ๐—ถ๐—ฒ๐˜„: Microsoft has addressed 107 vulnerabilities, one zero-day with PoC (CVE-2025-53779), 13 critical Third-party: actively exploited vulnerabilities in Google Chrome, Android, Apple, Cisco ISE, and Wing FTP Server, plus major third-party issues affecting Axis Communications, Dell ControlVault3, Nvidia, WordPress, and Sophos Firewall. Navigate to ๐—ฉ๐˜‚๐—น๐—ป๐—ฒ๐—ฟ๐—ฎ๐—ฏ๐—ถ๐—น๐—ถ๐˜๐˜† ๐——๐—ถ๐—ด๐—ฒ๐˜€๐˜ ๐—ณ๐—ฟ๐—ผ๐—บ ๐—”๐—ฐ๐˜๐—ถ๐—ผ๐—ป๐Ÿญfor comprehensive summary updated in real-time >>https://t.co/t0z4Y33kYz ๐—ค๐˜‚๐—ถ๐—ฐ๐—ธ ๐˜€๐˜‚๐—บ๐—บ๐—ฎ๐—ฟ๐˜†: ๐—ช๐—ถ๐—ป๐—ฑ๐—ผ๐˜„๐˜€: 107 vulnerabilities, one zero-day with PoC (CVE-2025-53779), 13 critical ๐—š๐—ผ๐—ผ๐—ด๐—น๐—ฒ ๐—–๐—ต๐—ฟ๐—ผ๐—บ๐—ฒ: Actively exploited sandbox escape (CVE-2025-6558) ๐—”๐˜…๐—ถ๐˜€ ๐—–๐—ผ๐—บ๐—บ๐˜‚๐—ป๐—ถ๐—ฐ๐—ฎ๐˜๐—ถ๐—ผ๐—ป๐˜€: Multiple flaws; over 6,500 exposed servers ๐——๐—ฒ๐—น๐—น ๐—–๐—ผ๐—ป๐˜๐—ฟ๐—ผ๐—น๐—ฉ๐—ฎ๐˜‚๐—น๐˜๐Ÿฏ: โ€œReVaultโ€ firmware vulnerabilities ๐—ก๐˜ƒ๐—ถ๐—ฑ๐—ถ๐—ฎ ๐—ง๐—ฟ๐—ถ๐˜๐—ผ๐—ป ๐—œ๐—ป๐—ณ๐—ฒ๐—ฟ๐—ฒ๐—ป๐—ฐ๐—ฒ ๐—ฆ๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฟ: Chained flaws; AI model theft and manipulation possible ๐—”๐—ป๐—ฑ๐—ฟ๐—ผ๐—ถ๐—ฑ: Two actively exploited Qualcomm GPU vulnerabilities (CVE-2025-21479, CVE-2025-27038) ๐—”๐—ฝ๐—ฝ๐—น๐—ฒ ๐—ถ๐—ข๐—ฆ/๐—บ๐—ฎ๐—ฐ๐—ข๐—ฆ: Actively exploited zero-day (CVE-2025-6558); 13 WebKit flaws and multiple OS component fixes across all platforms ๐—ช๐—ผ๐—ฟ๐—ฑ๐—ฃ๐—ฟ๐—ฒ๐˜€๐˜€ ๐—ฃ๐—ผ๐˜€๐˜ ๐—ฆ๐— ๐—ง๐—ฃ ๐—ฃ๐—น๐˜‚๐—ด๐—ถ๐—ป: Improper access control (CVE-2025-24000); 200,000+ sites vulnerable ๐—ฆ๐—ผ๐—ฝ๐—ต๐—ผ๐˜€ ๐—™๐—ถ๐—ฟ๐—ฒ๐˜„๐—ฎ๐—น๐—น: Multiple RCEs (CVE-2025-6704, CVE-2025-7624, CVE-2025-7382) plus privilege escalation flaws (CVE-2024-13974, CVE-2024-13973) ๐—–๐—ถ๐˜€๐—ฐ๐—ผ ๐—œ๐—ฆ๐—˜& ๐—œ๐—ฆ๐—˜-๐—ฃ๐—œ๐—–: Critical unauthenticated RCE (CVE-2025-20337) plus previously disclosed CVE-2025-20281, CVE-2025-20282 now under active exploitation ๐—ช๐—ถ๐—ป๐—ด ๐—™๐—ง๐—ฃ ๐—ฆ๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฟ: Actively exploited null byte injection (CVE-2025-47812); 5,000+ exposed web interfaces ๐— ๐—ผ๐—ฟ๐—ฒ ๐—ฑ๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€: https://t.co/FvbWKdjs9r ๐—ฆ๐—ผ๐˜‚๐—ฟ๐—ฐ๐—ฒ๐˜€: - Action1 Vulnerability Digest>> https://t.co/FvbWKdjs9r - Microsoft Security Update Guide>>https://t.co/ShbdyyYumO #PatchTuesday #VulnerabilityManagement #ZeroDay #PatchManagement #Cybersecurity #InfoSec #EndpointSecurity #MicrosoftSecurity #SecurityUpdates #CVEs #ITOps #Action1

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 09:02Current
7.8High risk
Vulners AI Score7.8
CVSS 3.17.5
EPSS0.00835
SSVC
319