81 matches found
CVE-2025-21485 Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC...
CVE-2025-21485 Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC...
CVE-2023-33029
Memory corruption in DSP Service during a remote call from HLOS to DSP...
CVE-2024-45554 Use After Free in DSP Service
Memory corruption during concurrent SSR execution due to race condition on the global maps list...
CVE-2025-21436 Use After Free in DSP Service
Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads...
CVE-2025-21436
CVE-2025-21436 describes a memory corruption vulnerability in Qualcomm/SoC kernel code triggered when two IOCTL calls are initiated concurrently from two different threads to create processes. The issue is characterized by local attack vector with low privileges required and no user interaction, ...
CVE-2025-21436 Use After Free in DSP Service
Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads...
CVE-2024-49848 Use After Free in DSP Service
Memory corruption while processing multiple IOCTL calls from HLOS to DSP...
CVE-2024-49848 Use After Free in DSP Service
Memory corruption while processing multiple IOCTL calls from HLOS to DSP...
CVE-2024-49848
CVE-2024-49848 concerns memory corruption in Qualcomm ADSPRPC FP/DSP interaction (the adsprpc kernel driver) via fastrpc_mmap structures. The provided sources describe a use-after-free vulnerability in FASTRPC_ATTR_KEEP_MAP handling that can allow a freed fastrpc_mmap object to be referenced by a...
CVE-2024-45580 Use After Free in DSP Service
Memory corruption while handling multuple IOCTL calls from userspace for remote invocation...
CVE-2024-45580 Use After Free in DSP Service
Memory corruption while handling multuple IOCTL calls from userspace for remote invocation...
CVE-2021-35132
Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...
CVE-2021-35126
Memory corruption in DSP service due to improper validation of input parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...
CVE-2024-33061 Buffer Over-read in DSP Service
Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process...
CVE-2024-33061 Buffer Over-read in DSP Service
Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process...
CVE-2024-43047 Use After Free in DSP Service
Memory corruption while maintaining memory maps of HLOS memory...
CVE-2024-43047 Use After Free in DSP Service
Memory corruption while maintaining memory maps of HLOS memory...