CVE-2026-25280 Out-of-bounds Write in DSP Service

Memory corruption when processing escape handling flow with insufficient user buffer sizes...