Skip to content
OpenAdvisories
High · 7.8 CVE-2025-47388 EUVD-2026-1263GHSA-2923-vx22-37wp

Buffer Copy without Checking Size of Input in DSP Service

Published Jan 6, 2026 · Updated Jan 7, 2026 · Assigned by qualcomm

Description

Memory corruption while passing pages to DSP with an unaligned starting address.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon FastConnect 6200, FastConnect 6700, FastConnect 6900, FastConnect 7800, QCS610, QMP1000, Qualcomm Video Collaboration VC1 Platform, Qualcomm Video Collaboration VC3 Platform, SG6150, SG6150P, SM6475, SM7435, SM8735, SM8750, SM8750P, Snapdragon 4 Gen 2 Mobile Platform, Snapdragon 6 Gen 1 Mobile Plat… —

Advisories 2

References