CVE-2026-25258 Out-of-bounds Read in DSP Service

Memory corruption while processing IOCTL calls for escape operations...

CVE-2025-47375

Memory corruption while handling different IOCTL calls from the user-space simultaneously...