CVE-2026-57555 Use After Free in DSP Service

Memory Corruption when executing system service routines due to improper handling of user input buffers...

CVE-2026-57555 Use After Free in DSP Service

Memory Corruption when executing system service routines due to improper handling of user input buffers...

CVE-2026-57555

A Use After Free vulnerability exists in the DSP Service due to improper handling of user input buffers during the execution of system service routines. This memory corruption flaw can lead to HIGH confidentiality, integrity, and availability impacts. Exploitation details are not provided in the ...

CVE-2026-57554 Use After Free in DSP Service

Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations...

CVE-2026-57554

A Use After Free vulnerability exists in the DSP Service due to a memory corruption issue. This occurs when asynchronous threads simultaneously access shared performance counter data during FastRPC invocations . The vulnerability has a High base severity (CVSS 3.1 score of 7.8) and can impact con...

CVE-2026-57554 Use After Free in DSP Service

Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations...

CVE-2026-57537 Use After Free in DSP Service

Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization...

CVE-2026-57537

A Use After Free vulnerability exists in the DSP Service due to a lack of proper synchronization when concurrently accessing and modifying geographic mapping data . This memory corruption flaw can result in high impact across confidentiality, integrity, and availability . No specific affected ver...

CVE-2026-57537 Use After Free in DSP Service

Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization...

CVE-2026-25280 Out-of-bounds Write in DSP Service

Memory corruption when processing escape handling flow with insufficient user buffer sizes...

CVE-2026-25280

CVE-2026-25280 is an out-of-bounds write (memory corruption) in the Qualcomm DSP Service , triggered by the escape handling flow when insufficient user buffer sizes are present. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector , low privileges required, and no u...

CVE-2026-25280 Out-of-bounds Write in DSP Service

Memory corruption when processing escape handling flow with insufficient user buffer sizes...

CVE-2026-25271 Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between check and use...

CVE-2026-25260 Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications...

CVE-2026-25259 Out-of-bounds Write in DSP Service

Memory corruption while processing multiple IOCTL command for escape operations...

CVE-2026-25258 Out-of-bounds Read in DSP Service

Memory corruption while processing IOCTL calls for escape operations...

CVE-2026-25258 Out-of-bounds Read in DSP Service

Memory corruption while processing IOCTL calls for escape operations...

CVE-2025-47407 Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level...

CVE-2025-47406 Buffer Over-read in DSP Service

Information Disclosure while processing IOCTL handler callbacks without verifying buffer size...

CVE-2025-47406

CVE-2025-47406 is a DSP Service buffer over-read vulnerability where information disclosure can occur during processing of IOCTL handler callbacks without verifying the input buffer size. The NVD entries describe the issue as Information Disclosure with a CVSSv3.1 base score of 6.1 (Medium), with...