{"schemaVersion":3,"id":"CVE-2025-27038","aliases":[],"status":"published","duplicateOf":null,"title":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","description":"Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.","dates":{"published":"2025-06-03T05:53:06.692Z","modified":"2026-02-26T18:27:39.591Z","reserved":null,"kevAdded":["2025-06-03T00:00:00.000Z"],"kevDue":["2025-06-24T00:00:00.000Z"]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.01016,"percentile":0.62939,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.01016},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.01016,"percentile":0.62939}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.01016,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.01016,"percentile":0.62939}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2025-06-03T00:00:00.000Z","dueDate":"2025-06-24T00:00:00.000Z","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","name":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","description":"Multiple Qualcomm chipsets contain a use-after-free vulnerability. This vulnerability allows for memory corruption while rendering graphics using Adreno GPU drivers in Chrome.","notes":[{"type":"text","value":"Please check with specific vendors (OEMs,) for information on patching status. For more information, please see: https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html"},{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2025-27038","label":"nvd.nist.gov/vuln/detail/CVE-2025-27038"}],"vendor":"Qualcomm","product":"Multiple Chipsets","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2025-06-03T00:00:00.000Z","dueDate":"2025-06-24T00:00:00.000Z","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","name":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","description":"Multiple Qualcomm chipsets contain a use-after-free vulnerability. This vulnerability allows for memory corruption while rendering graphics using Adreno GPU drivers in Chrome.","notes":[{"type":"text","value":"Please check with specific vendors (OEMs,) for information on patching status. For more information, please see: https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html"},{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2025-27038","label":"nvd.nist.gov/vuln/detail/CVE-2025-27038"}],"vendor":"Qualcomm","product":"Multiple Chipsets","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-416","name":"Use After Free","description":"The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","type":"weakness","status":"Stable","abstraction":"Variant","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/416.html"}],"affected":[{"vendor":"qualcomm, inc.","product":"snapdragon","name":"Snapdragon","label":"snapdragon","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"AR8031","noFixRecorded":false,"fixedIn":null},{"text":"CSRA6620","noFixRecorded":false,"fixedIn":null},{"text":"CSRA6640","noFixRecorded":false,"fixedIn":null},{"text":"FastConnect 7800","noFixRecorded":false,"fixedIn":null},{"text":"QCA2066","noFixRecorded":false,"fixedIn":null},{"text":"QCA6391","noFixRecorded":false,"fixedIn":null},{"text":"QCM6125","noFixRecorded":false,"fixedIn":null},{"text":"QCM8550","noFixRecorded":false,"fixedIn":null},{"text":"QCN9011","noFixRecorded":false,"fixedIn":null},{"text":"QCN9012","noFixRecorded":false,"fixedIn":null},{"text":"QCS6125","noFixRecorded":false,"fixedIn":null},{"text":"QCS8550","noFixRecorded":false,"fixedIn":null},{"text":"Qualcommr Video Collaboration VC1 Platform","noFixRecorded":false,"fixedIn":null},{"text":"SM6475","noFixRecorded":false,"fixedIn":null},{"text":"SM6650","noFixRecorded":false,"fixedIn":null},{"text":"SM6650P","noFixRecorded":false,"fixedIn":null},{"text":"SM7435","noFixRecorded":false,"fixedIn":null},{"text":"SM7635","noFixRecorded":false,"fixedIn":null},{"text":"SM7635P","noFixRecorded":false,"fixedIn":null},{"text":"Smart Audio 400 Platform","noFixRecorded":false,"fixedIn":null},{"text":"Snapdragon 4 Gen 2 Mobile Platform","noFixRecorded":false,"fixedIn":null},{"text":"Snapdragon 6 Gen 1 Mobile Platform","noFixRecorded":false,"fixedIn":null},{"text":"Snapdragon 680 4G Mobile Platform","noFixRecorded":false,"fixedIn":null},{"text":"Snapdragon 685 4G Mobile Platform (SM6225-AD)","noFixRecorded":false,"fixedIn":null},{"text":"Snapdragon W5+ Gen 1 Wearable Platform","noFixRecorded":false,"fixedIn":null},{"text":"SW5100","noFixRecorded":false,"fixedIn":null},{"text":"SW5100P","noFixRecorded":false,"fixedIn":null},{"text":"WCD9335","noFixRecorded":false,"fixedIn":null},{"text":"WCD9370","noFixRecorded":false,"fixedIn":null},{"text":"WCD9375","noFixRecorded":false,"fixedIn":null},{"text":"WCD9378","noFixRecorded":false,"fixedIn":null},{"text":"WCD9385","noFixRecorded":false,"fixedIn":null},{"text":"WCD9395","noFixRecorded":false,"fixedIn":null},{"text":"WCN3950","noFixRecorded":false,"fixedIn":null},{"text":"WCN3980","noFixRecorded":false,"fixedIn":null},{"text":"WCN3988","noFixRecorded":false,"fixedIn":null},{"text":"WCN6650","noFixRecorded":false,"fixedIn":null},{"text":"WCN6740","noFixRecorded":false,"fixedIn":null},{"text":"WCN6755","noFixRecorded":false,"fixedIn":null},{"text":"WSA8810","noFixRecorded":false,"fixedIn":null},{"text":"WSA8815","noFixRecorded":false,"fixedIn":null},{"text":"WSA8830","noFixRecorded":false,"fixedIn":null},{"text":"WSA8832","noFixRecorded":false,"fixedIn":null},{"text":"WSA8835","noFixRecorded":false,"fixedIn":null}],"versionsText":"AR8031 | CSRA6620 | CSRA6640 | FastConnect 7800 | QCA2066 | QCA6391 | QCM6125 | QCM8550 | QCN9011 | QCN9012 | QCS6125 | QCS8550 | Qualcommr Video Collaboration VC1 Platform | SM6475 | SM6650 | SM6650P | SM7435 | SM7635 | SM7635P | Smart Audio 400 Platform | Snapdragon 4 Gen 2 Mobile Platform | Snapdragon 6 Gen 1 Mobile Platform | Snapdragon 680 4G Mobile Platform | Snapdragon 685 4G Mobile Platform (SM6225-AD) | Snapdragon W5+ Gen 1 Wearable Platform | SW5100 | SW5100P | WCD9335 | WCD9370 | WCD9375 | WCD9378 | WCD9385 | WCD9395 | WCN3950 | WCN3980 | WCN3988 | WCN6650 | WCN6740 | WCN6755 | WSA8810 | WSA8815 | WSA8830 | WSA8832 | WSA8835","eol":null,"hubHref":"/vendor/qualcomm_inc/snapdragon"},{"vendor":"qualcomm","product":"ar8031_firmware","name":"ar8031 firmware","label":"ar8031_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/ar8031"},{"vendor":"qualcomm","product":"csra6620_firmware","name":"csra6620 firmware","label":"csra6620_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/csra6620"},{"vendor":"qualcomm","product":"csra6640_firmware","name":"csra6640 firmware","label":"csra6640_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/csra6640"},{"vendor":"qualcomm","product":"fastconnect_7800_firmware","name":"fastconnect 7800 firmware","label":"fastconnect_7800_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/fastconnect_7800"},{"vendor":"qualcomm","product":"qca2066_firmware","name":"qca2066 firmware","label":"qca2066_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/qca2066"},{"vendor":"qualcomm","product":"qca6391_firmware","name":"qca6391 firmware","label":"qca6391_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/qca6391"},{"vendor":"qualcomm","product":"qcm6125_firmware","name":"qcm6125 firmware","label":"qcm6125_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/qcm6125"},{"vendor":"qualcomm","product":"qcm8550_firmware","name":"qcm8550 firmware","label":"qcm8550_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/qcm8550"},{"vendor":"qualcomm","product":"qcn9011_firmware","name":"qcn9011 firmware","label":"qcn9011_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/qcn9011"},{"vendor":"qualcomm","product":"qcn9012_firmware","name":"qcn9012 firmware","label":"qcn9012_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/qcn9012"},{"vendor":"qualcomm","product":"qcs6125_firmware","name":"qcs6125 firmware","label":"qcs6125_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/qcs6125"},{"vendor":"qualcomm","product":"qcs8550_firmware","name":"qcs8550 firmware","label":"qcs8550_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/qcs8550"},{"vendor":"qualcomm","product":"sm6475_firmware","name":"sm6475 firmware","label":"sm6475_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/sm6475"},{"vendor":"qualcomm","product":"sm6650_firmware","name":"sm6650 firmware","label":"sm6650_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/sm6650"},{"vendor":"qualcomm","product":"sm6650p_firmware","name":"sm6650p firmware","label":"sm6650p_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/sm6650p"},{"vendor":"qualcomm","product":"sm7435_firmware","name":"sm7435 firmware","label":"sm7435_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/sm7435"},{"vendor":"qualcomm","product":"sm7635_firmware","name":"sm7635 firmware","label":"sm7635_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/sm7635"},{"vendor":"qualcomm","product":"sm7635p_firmware","name":"sm7635p firmware","label":"sm7635p_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/sm7635p"},{"vendor":"qualcomm","product":"smart_audio_400_platform_firmware","name":"smart audio 400 platform firmware","label":"smart_audio_400_platform_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/smart_audio_400_platform"},{"vendor":"qualcomm","product":"snapdragon_4_gen_2_mobile_platform_firmware","name":"snapdragon 4 gen 2 mobile platform firmware","label":"snapdragon_4_gen_2_mobile_platform_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/snapdragon_4_gen_2_mobile_platform"},{"vendor":"qualcomm","product":"snapdragon_6_gen_1_mobile_platform_firmware","name":"snapdragon 6 gen 1 mobile platform firmware","label":"snapdragon_6_gen_1_mobile_platform_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/snapdragon_6_gen_1_mobile_platform"},{"vendor":"qualcomm","product":"snapdragon_680_4g_mobile_platform_firmware","name":"snapdragon 680 4g mobile platform firmware","label":"snapdragon_680_4g_mobile_platform_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/snapdragon_680_4g_mobile_platform"},{"vendor":"qualcomm","product":"snapdragon_685_4g_mobile_platform_\\(sm6225-ad\\)_firmware","name":"snapdragon 685 4g mobile platform \\(sm6225-ad\\) firmware","label":"snapdragon_685_4g_mobile_platform_\\(sm6225-ad\\)_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/snapdragon_685_4g_mobile_platform_sm6225-ad"},{"vendor":"qualcomm","product":"snapdragon_w5\\+_gen_1_wearable_platform_firmware","name":"snapdragon w5\\+ gen 1 wearable platform firmware","label":"snapdragon_w5\\+_gen_1_wearable_platform_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/snapdragon_w5_gen_1_wearable_platform"},{"vendor":"qualcomm","product":"sw5100_firmware","name":"sw5100 firmware","label":"sw5100_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/sw5100"},{"vendor":"qualcomm","product":"sw5100p_firmware","name":"sw5100p firmware","label":"sw5100p_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/sw5100p"},{"vendor":"qualcomm","product":"video_collaboration_vc1_platform_firmware","name":"video collaboration vc1 platform firmware","label":"video_collaboration_vc1_platform_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/video_collaboration_vc1_platform"},{"vendor":"qualcomm","product":"wcd9335_firmware","name":"wcd9335 firmware","label":"wcd9335_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/wcd9335"},{"vendor":"qualcomm","product":"wcd9370_firmware","name":"wcd9370 firmware","label":"wcd9370_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/wcd9370"},{"vendor":"qualcomm","product":"wcd9375_firmware","name":"wcd9375 firmware","label":"wcd9375_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/wcd9375"},{"vendor":"qualcomm","product":"wcd9378_firmware","name":"wcd9378 firmware","label":"wcd9378_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/wcd9378"},{"vendor":"qualcomm","product":"wcd9385_firmware","name":"wcd9385 firmware","label":"wcd9385_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/wcd9385"},{"vendor":"qualcomm","product":"wcd9395_firmware","name":"wcd9395 firmware","label":"wcd9395_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/wcd9395"},{"vendor":"qualcomm","product":"wcn3950_firmware","name":"wcn3950 firmware","label":"wcn3950_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/wcn3950"},{"vendor":"qualcomm","product":"wcn3980_firmware","name":"wcn3980 firmware","label":"wcn3980_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/wcn3980"},{"vendor":"qualcomm","product":"wcn3988_firmware","name":"wcn3988 firmware","label":"wcn3988_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/wcn3988"},{"vendor":"qualcomm","product":"wcn6650_firmware","name":"wcn6650 firmware","label":"wcn6650_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/wcn6650"},{"vendor":"qualcomm","product":"wcn6740_firmware","name":"wcn6740 firmware","label":"wcn6740_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/wcn6740"},{"vendor":"qualcomm","product":"wcn6755_firmware","name":"wcn6755 firmware","label":"wcn6755_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/wcn6755"},{"vendor":"qualcomm","product":"wsa8810_firmware","name":"wsa8810 firmware","label":"wsa8810_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/wsa8810"},{"vendor":"qualcomm","product":"wsa8815_firmware","name":"wsa8815 firmware","label":"wsa8815_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/wsa8815"},{"vendor":"qualcomm","product":"wsa8830_firmware","name":"wsa8830 firmware","label":"wsa8830_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/wsa8830"},{"vendor":"qualcomm","product":"wsa8832_firmware","name":"wsa8832 firmware","label":"wsa8832_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/wsa8832"},{"vendor":"qualcomm","product":"wsa8835_firmware","name":"wsa8835 firmware","label":"wsa8835_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/qualcomm/wsa8835"}],"affectedCount":45,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html","label":"docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html","hostname":"docs.qualcomm.com","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-27038","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-27038","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2025-06-03T05:53:06.692Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2025-06-03T00:00:00.000Z","label":"Added to CISA KEV","detail":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2025-06-24T00:00:00.000Z","label":"CISA remediation due","detail":"Apply mitigations per vendor instructions.","source":"cisa"},{"kind":"modified","date":"2026-02-26T18:27:39.591Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T20:12:56.288Z","stale":false,"partial":false}}