Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-47406 EUVD-2025-209631GHSA-75cg-pp3q-vrg5

Buffer Over-read in DSP Service

Published May 4, 2026 · Updated May 4, 2026 · Assigned by qualcomm

Description

Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon Cologne, FastConnect 6700, FastConnect 6900, FastConnect 7800, IQX5121, IQX7181, QCA0000, QCM5430, QCM6490, Qualcomm Video Collaboration VC3 Platform, SC8380XP, Snapdragon 7c+ Gen 3 Compute, Snapdragon 8cx Gen 3 Compute Platform, WCD9370, WCD9375, WCD9378C, WCD9380, WCD9385, WSA8830, WSA8835, WSA88… —

References