Skip to content
OpenAdvisories
High · 7.8 CVE-2026-25260 EUVD-2026-33825GHSA-8wfg-43p7-wg28

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Published Jun 1, 2026 · Updated Jun 3, 2026 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon Cologne, FastConnect 6900, FastConnect 7800, QCA0000, SC8380XP, WCD9378C, WCD9380, WCD9385, WSA8840, WSA8845, WSA8845H, X2000077, X2000086, X2000090, X2000092, X2000094, XG101002, XG101032, XG101039 —

Advisories 1

References