CVE-2025-47354 Use After Free in DSP Service

Memory corruption while allocating buffers in DSP service...

CVE-2025-47354

CVE-2025-47354 is described across multiple sources as a memory corruption issue in the DSP service related to buffer allocation on Qualcomm chipsets ( Qualcomm kernel component ). Several enrichment entries label the flaw as a Use After Free in the DSP service; Red Hat/NVD entries repeat the mem...

EUVD-2025-33235

Memory corruption while allocating buffers in DSP service...

CVE-2025-47351 Integer Overflow or Wraparound in DSP Service

Memory corruption while processing user buffers...

CVE-2025-47351

CVE-2025-47351 affects Qualcomm components (Kernel) with memory corruption during user-buffer processing. The metric indicates local, low-privilege, low-complexity access that could lead to high impact (confidentiality, integrity, and availability). Exploitation status is not detailed in the conn...

CVE-2025-47349 Use of Out-of-range Pointer Offset in DSP Service

Memory corruption while processing an escape call...

CVE-2025-47349 Use of Out-of-range Pointer Offset in DSP Service

Memory corruption while processing an escape call...

CVE-2025-47340 Out-of-bounds Write in DSP Service

Memory corruption while processing IOCTL call to get the mapping...

CVE-2025-47340

CVE-2025-47340 is described as a memory corruption issue that occurs when processing an IOCTL to obtain mapping information in Qualcomm chipsets, specifically linked to the DSP Service (out-of-bounds write per CVE record) and exposed to an attacker with local access and low privileges. The CVSSv3...

CVE-2025-47340 Out-of-bounds Write in DSP Service

Memory corruption while processing IOCTL call to get the mapping...

CVE-2025-47338

CVE-2025-47338 – Memory corruption occurring when processing escape commands from userspace in Qualcomm DSP Service. Multiple feeds (Red Hat, NVD, CVE lists, ENISA/CNNVD) flag a memory corruption path triggered by user-space escape command handling, with impact described as high (C/H/I/A) and CVS...

CVE-2025-47338 Untrusted Pointer Dereference in DSP Service

Memory corruption while processing escape commands from userspace...

Qualcomm Chipsets 资源管理错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A resource management error vulnerability exists in Qualcomm Chipsets that stems from a memory corruption in the DSP service allocation buffer...

PT-2025-41353

Name of the Vulnerable Software and Affected Versions Affected versions not specified Description A memory corruption issue exists when allocating buffers within the DSP service. This can lead to unexpected behavior or potential compromise of the system. Recommendations At the moment, there is no...

EUVD-2024-48028

Malicious code in bioql PyPI...

UBUNTU-CVE-2023-53497

In the Linux kernel, the following vulnerability has been resolved: media: vsp1: Replace vb2isstreaming with vb2startstreamingcalled The vsp1 driver uses the vb2isstreaming function in its .bufqueue handler to check if the .startstreaming operation has been called, and decide whether to just add...

CVE-2023-53434 remoteproc: imx_dsp_rproc: Add custom memory copy implementation for i.MX DSP Cores

In the Linux kernel, the following vulnerability has been resolved: remoteproc: imxdsprproc: Add custom memory copy implementation for i.MX DSP Cores The IRAM is part of the HiFi DSP. According to hardware specification only 32-bits write are allowed otherwise we get a Kernel panic. Therefore add...

PT-2025-44104

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s fastrpc implementation that could lead to a map leak. A failure within the copy to user function could result in an early return without properly...

CVE-2024-7007

Positron Broadcast Signal Processor TRA7005 v1.20 is vulnerable to an authentication bypass exploit that could allow an attacker to have unauthorized access to protected areas of the application...

CVE-2023-33035

Memory corruption while invoking callback function of AFE from ADSP...