Skip to content
OpenAdvisories
High · 7.8 CVE-2025-21486 EUVD-2025-16703GHSA-39fm-j66r-ffj4

Untrusted Pointer Dereference in DSP Service

Published Jun 3, 2025 · Updated Feb 26, 2026 · Assigned by qualcomm

Description

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon FastConnect 6900, FastConnect 7800, QMP1000, SM8735, SM8750, SM8750P, Snapdragon W5+ Gen 1 Wearable Platform, SW5100, SW5100P, SXR2230P, SXR2250P, SXR2330P, WCD9378, WCD9380, WCD9385, WCD9395, WCN3660B, WCN3680B, WCN3980, WCN3988, WCN7750, WCN7860, WCN7861, WCN7880, WCN7881, WSA8830, WSA8832, WSA88… —

Advisories 2

References