CVE-2025-270387.5High
CVE-2025-27038: Use After Free in Graphics
Qualcomm · Multiple Chipsets
No fix listed · Affected: Qualcomm Multiple Chipsets · Exploitation: in CISA KEV since 3 Jun 2025
Exploitation attributed to APT29 (reported by SecurityWeek)
ExploitationIn CISA KEV
- In CISA KEVCISA KEV catalogue3 Jun 2025
- Exploited (reported)SecurityWeek5 Nov
- Scanning observed: not seen
- Proof of concept public: not seen
- Not established: not seen
Who exploits it, and who says so
1.0%probability of exploitation in the next 30 days
64th percentile
050100
Higher than 64% of scored CVEs
7.5HighCVSS
LowMediumHighCrit.
Federal deadline
CISA KEV · added 3 Jun · catalogue entry
Passed 499 days ago
DescriptionNVD
Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.
What changed
- SecurityWeek reported exploitation by UNC2452 SecurityWeek
- SecurityWeek reported exploitation SecurityWeek
- CISA added it to the KEV catalogue CISA
Coverage1 article · 1 outlet
First in our coverage: SecurityWeek, 5 Nov.
- Midnight Blizzard targets mobile devices with exploit chainsSecurityWeek · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.