Reddit NetSec

CVE Database V5

AlienVault OTX General

Reddit InfoSec News

Exploit-DB RSS Feed

CIRCL OSINT Feed

ThreatFox MISP Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.

CVE-2025-27038 is a high-severity use-after-free vulnerability (CWE-416) found in Qualcomm Snapdragon platforms, specifically within the Adreno GPU drivers responsible for rendering graphics in the Chrome browser. The vulnerability arises due to improper memory management during graphics rendering, leading to memory corruption. This flaw can be triggered remotely via a specially crafted web page or content rendered in Chrome, requiring user interaction (e.g., visiting a malicious website). The vulnerability does not require any privileges or prior authentication, but the attack complexity is high, meaning exploitation demands specific conditions or expertise. Successful exploitation can lead to full compromise of confidentiality, integrity, and availability of the affected device, allowing an attacker to execute arbitrary code, escalate privileges, or cause denial of service. The affected Snapdragon versions include a broad range of mobile and wearable platforms, such as Snapdragon 4 Gen 2, 6 Gen 1, 680 4G, 685 4G, W5+ Gen 1, and multiple other chipsets and audio platforms. Although no known exploits have been reported in the wild yet, the vulnerability's nature and impact make it a critical concern for devices using these Qualcomm components, especially those running Chrome or Chromium-based browsers. No official patches have been published as of the vulnerability disclosure date (June 3, 2025). The CVSS v3.1 score is 7.5, reflecting high severity with network attack vector, high attack complexity, no privileges required, user interaction needed, and high impact on confidentiality, integrity, and availability.

Detailed information about CVE-2025-27038: CWE-416 Use After Free in Qualcomm, Inc. Snapdragon affecting Qualcomm, Inc. Snapdragon. Get real-time updates, techn

Title	Severity	Type	Source	Date

Threats Tagged 'cve-2025-27038'

Filter Threats

Threats Tagged 'cve-2025-27038'