EUVD-2025-33235

Memory corruption while allocating buffers in DSP service...

CVE-2025-47354 Use After Free in DSP Service

Memory corruption while allocating buffers in DSP service...

CVE-2025-47354

CVE-2025-47354 is described across multiple sources as a memory corruption issue in the DSP service related to buffer allocation on Qualcomm chipsets ( Qualcomm kernel component ). Several enrichment entries label the flaw as a Use After Free in the DSP service; Red Hat/NVD entries repeat the mem...

CVE-2025-47351

CVE-2025-47351 affects Qualcomm components (Kernel) with memory corruption during user-buffer processing. The metric indicates local, low-privilege, low-complexity access that could lead to high impact (confidentiality, integrity, and availability). Exploitation status is not detailed in the conn...

CVE-2025-47351 Integer Overflow or Wraparound in DSP Service

Memory corruption while processing user buffers...

CVE-2025-47349 Use of Out-of-range Pointer Offset in DSP Service

Memory corruption while processing an escape call...

CVE-2025-47349 Use of Out-of-range Pointer Offset in DSP Service

Memory corruption while processing an escape call...

CVE-2025-47340 Out-of-bounds Write in DSP Service

Memory corruption while processing IOCTL call to get the mapping...

CVE-2025-47340 Out-of-bounds Write in DSP Service

Memory corruption while processing IOCTL call to get the mapping...

CVE-2025-47340

CVE-2025-47340 is described as a memory corruption issue that occurs when processing an IOCTL to obtain mapping information in Qualcomm chipsets, specifically linked to the DSP Service (out-of-bounds write per CVE record) and exposed to an attacker with local access and low privileges. The CVSSv3...

CVE-2025-47338 Untrusted Pointer Dereference in DSP Service

Memory corruption while processing escape commands from userspace...

CVE-2025-47338

CVE-2025-47338 – Memory corruption occurring when processing escape commands from userspace in Qualcomm DSP Service. Multiple feeds (Red Hat, NVD, CVE lists, ENISA/CNNVD) flag a memory corruption path triggered by user-space escape command handling, with impact described as high (C/H/I/A) and CVS...

Systematic Assessment of Cache Timing Vulnerabilities on RISC-V Processors

While interest in the open RISC-V instruction set architecture is growing, tools to assess the security of concrete processor implementations are lacking. There are dedicated tools and benchmarks for common microarchitectural side-channel vulnerabilities for popular processor families such as Int...

Qualcomm Chipsets 资源管理错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A resource management error vulnerability exists in Qualcomm Chipsets that stems from a memory corruption in the DSP service allocation buffer...

PT-2025-41353

Name of the Vulnerable Software and Affected Versions Affected versions not specified Description A memory corruption issue exists when allocating buffers within the DSP service. This can lead to unexpected behavior or potential compromise of the system. Recommendations At the moment, there is no...

Tenda W12 安全漏洞

Tenda W12 is a dual-band Gigabit wireless panelized access point AP from Tenda Technology, designed for hotels, villas, large homes and other scenarios, supporting the IEEE802.11ac protocol and the Wave2 standard with 1167Mbps dual-band concurrent rate. A null pointer dereference vulnerability...

SUSE CVE-2025-61725

The ParseAddress function constructs domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption...

Linux Distros Unpatched Vulnerability : CVE-2022-50494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thermal: intelpowerclamp: Use getcpu instead of smpprocessorid to avoid crash When CPU 0 is offline and intelpowerclamp is used to inject idle, it generates...

EUVD-2025-32759

In the Linux kernel, the following vulnerability has been resolved: srcu: Delegate work to the boot cpu if using SRCUSIZESMALL Commit 994f706872e6 "srcu: Make Tree SRCU able to operate without snpnode array" assumes that cpu 0 is always online. However, there really are situations when some other...

CVE-2023-53671 srcu: Delegate work to the boot cpu if using SRCU_SIZE_SMALL

In the Linux kernel, the following vulnerability has been resolved: srcu: Delegate work to the boot cpu if using SRCUSIZESMALL Commit 994f706872e6 "srcu: Make Tree SRCU able to operate without snpnode array" assumes that cpu 0 is always online. However, there really are situations when some other...