CVE-2025-27038 Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Active exploitation observed

· CISA KEV catalogue

Required action Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Ransomware campaigns Not observed so far

Weakness CWE-416

Description

Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.

Affected products and versions

Product	Affected versions	Fixed in
Snapdragon	Versions not published

Other CVEs of Snapdragon

The 997 CVEs of Snapdragon →

CVE-2026-57559 Memory corruption while processing service requests 7.8 High CVE-2026-57555 Memory Corruption when executing system service routines due to improper handling of user input buffers 7.8 High CVE-2026-57554 Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC… 7.8 High CVE-2026-57546 Transient DOS when processing a continuous receive command with a zero-sized global configuration override 7.5 High