CVE-2025-21486 Untrusted Pointer Dereference in DSP Service

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary...

CVE-2025-21486

CVE-2025-21486 describes a memory corruption in Qualcomm components during dynamic process creation when the client passes only the address and length of the shell binary. The CVSSv3.1 vector indicates local access, low attack complexity and privileges, no user interaction, with high impact to co...

CVE-2025-21485

CVE-2025-21485 is a memory corruption vulnerability in Qualcomm FastRPC, triggered while processing INIT and multimode IOCTL calls. Affects Qualcomm chipsets with FastRPC kernel interfaces; CVSS-like data from the published entry indicates local access, low attack complexity, and high impact acro...

CVE-2025-21485 Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC...

CVE-2025-21485 Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC...

CVE-2023-33063

Memory corruption in DSP Services during a remote call from HLOS to DSP...

CVE-2023-33029

Memory corruption in DSP Service during a remote call from HLOS to DSP...

CVE-2022-25722

Information exposure in DSP services due to improper handling of freeing memory...

CVE-2022-43474

Uncontrolled search path for the DSP Builder software installer before version 22.4 for IntelR FPGAs Pro Edition may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2025-29062

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The Linux kernel contains a flaw in the cs dsp firmware that may lead to an out-of-bounds memory read access. This issue was identified through KASAN Kernel Address Sanitizer reporting...

CVE-2022-21787

In audio DSP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06558844; Issue ID: ALPS06558844...

CVE-2022-21205

Improper restriction of XML external entity reference in DSP Builder Pro for IntelR QuartusR Prime Pro Edition before version 21.3 may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2022-21786

In audio DSP, there is a possible memory corruption due to improper casting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06558822; Issue ID: ALPS06558822...

CVE-2021-25452

An improper input validation vulnerability in loading graph file in DSP driver prior to SMR Sep-2021 Release 1 allows attackers to perform permanent denial of service on the device...

CVE-2021-25475

A possible heap-based buffer overflow vulnerability in DSP kernel driver prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution...

CVE-2021-25457

An improper input validation vulnerability in DSP driver prior to SMR Sep-2021 Release 1 allows local attackers to get a limited kernel memory information...

CVE-2021-25371

A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP...

CVE-2021-25372

An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access...

CVE-2021-0663

In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05844458; Issue ID: ALPS05844458...

CVE-2021-25467

Assuming system privilege is gained, possible buffer overflow vulnerabilities in the Vision DSP kernel driver prior to SMR Oct-2021 Release 1 allows privilege escalation to Root by hijacking loaded library...