CVE-2025-47354

Memory corruption while allocating buffers in DSP service...

HPESBHF04935 rev.1 - Certain HPE Simplivity Servers Using Certain Intel Processors, INTEL-SA-01249, 2025.2 IPU, Intel Processor Stream Cache Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen11 - Prior to HPE SimpliVity Gen11 Firmware v20251001 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-20109 |...

Mageia: Security Advisory (MGASA-2025-0236)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CLSA-2025-1760026053 libmicrohttpd: Fix of CVE-2023-27371

CVE-2023-27371: Fix improper parsing of multipart/form-data boundary in MHDcreatepostprocessor to prevent remote DoS vulnerability...

CVE-2025-39959

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp: Fix incorrect retrival of acpchipinfo Use devgetdrvdatadev-parent instead of devgetplatdatadev to correctly obtain acpchipinfo members in the acp I2S driver. Previously, some members were not updated properly due ...

CVE-2025-47354

Memory corruption while allocating buffers in DSP service...

CVE-2025-47354 Use After Free in DSP Service

Memory corruption while allocating buffers in DSP service...

EUVD-2025-33235

Memory corruption while allocating buffers in DSP service...

CVE-2025-47354

CVE-2025-47354 is described across multiple sources as a memory corruption issue in the DSP service related to buffer allocation on Qualcomm chipsets ( Qualcomm kernel component ). Several enrichment entries label the flaw as a Use After Free in the DSP service; Red Hat/NVD entries repeat the mem...

CVE-2025-47351

CVE-2025-47351 affects Qualcomm components (Kernel) with memory corruption during user-buffer processing. The metric indicates local, low-privilege, low-complexity access that could lead to high impact (confidentiality, integrity, and availability). Exploitation status is not detailed in the conn...

CVE-2025-47351 Integer Overflow or Wraparound in DSP Service

Memory corruption while processing user buffers...

CVE-2025-47349 Use of Out-of-range Pointer Offset in DSP Service

Memory corruption while processing an escape call...

CVE-2025-47349 Use of Out-of-range Pointer Offset in DSP Service

Memory corruption while processing an escape call...

CVE-2025-47340 Out-of-bounds Write in DSP Service

Memory corruption while processing IOCTL call to get the mapping...

CVE-2025-47340 Out-of-bounds Write in DSP Service

Memory corruption while processing IOCTL call to get the mapping...

CVE-2025-47340

CVE-2025-47340 is described as a memory corruption issue that occurs when processing an IOCTL to obtain mapping information in Qualcomm chipsets, specifically linked to the DSP Service (out-of-bounds write per CVE record) and exposed to an attacker with local access and low privileges. The CVSSv3...

CVE-2025-47338 Untrusted Pointer Dereference in DSP Service

Memory corruption while processing escape commands from userspace...

CVE-2025-47338

CVE-2025-47338 – Memory corruption occurring when processing escape commands from userspace in Qualcomm DSP Service. Multiple feeds (Red Hat, NVD, CVE lists, ENISA/CNNVD) flag a memory corruption path triggered by user-space escape command handling, with impact described as high (C/H/I/A) and CVS...

Systematic Assessment of Cache Timing Vulnerabilities on RISC-V Processors

While interest in the open RISC-V instruction set architecture is growing, tools to assess the security of concrete processor implementations are lacking. There are dedicated tools and benchmarks for common microarchitectural side-channel vulnerabilities for popular processor families such as Int...

PT-2025-41353

Name of the Vulnerable Software and Affected Versions Affected versions not specified Description A memory corruption issue exists when allocating buffers within the DSP service. This can lead to unexpected behavior or potential compromise of the system. Recommendations At the moment, there is no...