PT-2026-36843

Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level...

CVE-2026-21380

CVE-2026-21380 involves memory corruption (use-after-free) in the DSP service when deprecated DMABUF IOCTL calls are used to manage video memory. Documents describe a local, low-privilege attack with no user interaction and high impact to confidentiality, integrity, and availability. Root cause i...

CVE-2025-47388

Memory corruption while passing pages to DSP with an unaligned starting address...

CVE-2025-47388

Memory corruption while passing pages to DSP with an unaligned starting address...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from an unaligned start address when passing a page to the DSP, which could lead to memory corruption...

CVE-2025-47394 Buffer Copy Without Checking Size of Input in DSP Service

Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations...

CVE-2025-47394

CVE-2025-47394 describes memory corruption caused by incorrect offset calculations when copying overlapping buffers during memory operations. The Red Hat entry echoes this description, noting a memory corruption condition from overlapping-buffer copy due to miscalculated offsets. The available do...

CVE-2025-47394 Buffer Copy Without Checking Size of Input in DSP Service

Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations...

CVE-2025-47388 Buffer Copy without Checking Size of Input in DSP Service

Memory corruption while passing pages to DSP with an unaligned starting address...

CVE-2025-47388 Buffer Copy without Checking Size of Input in DSP Service

Memory corruption while passing pages to DSP with an unaligned starting address...

PT-2026-1542

Name of the Vulnerable Software and Affected Versions versions prior to 2025-47388 Description A memory corruption issue occurs when passing pages to the Digital Signal Processor DSP with an unaligned starting address. Recommendations At the moment, there is no information about a newer version...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993095)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993095 advisory. In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible memory leak in mISDNdspelementregister Afer commit 1fa5ae857bb1 driver core:...

CVE-2025-47350 Use After Free in DSP Service

Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application...

CVE-2025-47350

CVE-2025-47350 describes a memory corruption flaw in Qualcomm chipsets triggered by concurrent memory mapping/unmapping requests from a user-space application. The vulnerability affects memory handling paths and is labeled with HIGH impact on confidentiality, integrity, and availability (CVSSv3.1...

CVE-2025-47350 Use After Free in DSP Service

Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application...

EUVD-2025-202849

In WAVESsenddatatodsp of libaocwaves.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-40113 remoteproc: qcom: pas: Shutdown lite ADSP DTB on X1E

In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom: pas: Shutdown lite ADSP DTB on X1E The ADSP firmware on X1E has separate firmware binaries for the main firmware and the DTB. The same applies for the "lite" firmware loaded by the boot firmware. When preparing ...

CVE-2025-47368 Buffer Over-read in DSP Service

Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing...

SUSE CVE-2025-40036

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix possible map leak in fastrpcputargs copytouser failure would cause an early return without cleaning up the fdlist, which has been updated by the DSP. This could lead to map leak. Fix this by redirecting to a...

EUVD-2025-36492

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix possible map leak in fastrpcputargs copytouser failure would cause an early return without cleaning up the fdlist, which has been updated by the DSP. This could lead to map leak. Fix this by redirecting to a...