Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-25280

Out-of-bounds Write in DSP Service

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
qualcomm

Description

Memory corruption when processing escape handling flow with insufficient user buffer sizes.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qualcomm, Inc. Snapdragon

Default version status: unaffected

  • Cologneaffected
  • FastConnect 6700affected
  • FastConnect 6900affected
  • FastConnect 7800affected
  • IQX5121affected
  • IQX7181affected
  • QCA0000affected
  • QCM5430affected
  • QCM6490affected
  • Qualcomm Video Collaboration VC3 Platformaffected
  • SC8380XPaffected
  • Snapdragon X2 Eliteaffected
  • WCD9370affected
  • WCD9375affected
  • WCD9378Caffected
  • WCD9380affected
  • WCD9385affected
  • WSA8840affected
  • WSA8845affected
  • WSA8845Haffected

References