CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“2 of 2 advisories (Page 1/1)
CVE-2025-270387.5/HIGHEPSS 1.0%CISA KEV
2025-06-03

Qualcomm Adreno GPU Driver Memory Corruption Vulnerability (CVE-2025-27038) Technical Advisory

[Affected Scope] Android devices equipped with Qualcomm Adreno GPU drivers and running Google Chrome browser

[Impact] Remote attackers can exploit GPU rendering pipelines to trigger memory corruption, potentially leading to sandbox escape and arbitrary code execution

[Mitigation] Apply the latest security patches released by Qualcomm and device OEMs, and update Google Chrome to the latest version

CVE-2025-214808.6/HIGHEPSS 0.4%CISA KEV
2025-06-03

Qualcomm Adreno GPU Micronode Memory Corruption and Privilege Escalation Vulnerability (CVE-2025-21480) Analysis and Mitigation Guide

[Affected Scope] Android and embedded devices utilizing Qualcomm Adreno GPU chipsets and associated drivers

[Impact] Local attackers can execute unauthorized commands within the GPU micronode by sending a specific sequence of commands, leading to memory corruption and local privilege escalation (LPE) to kernel level

[Mitigation] Immediately apply the official security patches released by Qualcomm and device OEMs in or after the June 2025 security bulletin

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse