CVE-2025-27038: Qualcomm Multiple Chipsets Use-After-Free Vulnerability.

Qualcomm Multiple Chipsets Use-After-Free Vulnerability. Multiple Qualcomm chipsets contain a use-after-free vulnerability. This vulnerability allows for memory corruption while rendering graphics using Adreno GPU drivers in Chrome.

• CISA KEV-listed (remediation due 2025-06-24)
• EPSS 1.0% (64.2% percentile)
• CVSS 7.5 high

Related briefings

• Russia's APT29 hijacks websites to hack unpatched phones 2026-11-04

Linked threat actors

• APT29 machine-inferred link

Browse the CVE database

Read the full analysis on IntelFusions