Use After Free in DSP Service_CVE-2025-47354

7.8 / 10

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Memory corruption while allocating buffers in DSP service.

Basic Information

ID CVE-2025-47354

Source qualcomm

Published Oct 9, 2025 at 03:18

Affected Product

Vendor Qualcomm, Inc.

Product Snapdragon

Version FastConnect 6200

Affected Versions Qualcomm, Inc. Snapdragon FastConnect 6200
Qualcomm, Inc. Snapdragon FastConnect 6700
Qualcomm, Inc. Snapdragon FastConnect 7800
Qualcomm, Inc. Snapdragon QMP1000
Qualcomm, Inc. Snapdragon SM6475
Qualcomm, Inc. Snapdragon SM7435
Qualcomm, Inc. Snapdragon SM8735
Qualcomm, Inc. Snapdragon SM8750
Qualcomm, Inc. Snapdragon SM8750P
Qualcomm, Inc. Snapdragon Snapdragon 4 Gen 2 Mobile Platform
Qualcomm, Inc. Snapdragon Snapdragon 6 Gen 1 Mobile Platform
Qualcomm, Inc. Snapdragon Snapdragon W5+ Gen 1 Wearable Platform
Qualcomm, Inc. Snapdragon SW5100
Qualcomm, Inc. Snapdragon SW5100P
Qualcomm, Inc. Snapdragon SXR2330P
Qualcomm, Inc. Snapdragon SXR2350P
Qualcomm, Inc. Snapdragon WCD9370
Qualcomm, Inc. Snapdragon WCD9375
Qualcomm, Inc. Snapdragon WCD9378
Qualcomm, Inc. Snapdragon WCD9380
Qualcomm, Inc. Snapdragon WCD9385
Qualcomm, Inc. Snapdragon WCD9395
Qualcomm, Inc. Snapdragon WCN3950
Qualcomm, Inc. Snapdragon WCN3988
Qualcomm, Inc. Snapdragon WCN6755
Qualcomm, Inc. Snapdragon WCN7750
Qualcomm, Inc. Snapdragon WCN7860
Qualcomm, Inc. Snapdragon WCN7861
Qualcomm, Inc. Snapdragon WCN7880
Qualcomm, Inc. Snapdragon WCN7881
Qualcomm, Inc. Snapdragon WSA8810
Qualcomm, Inc. Snapdragon WSA8815
Qualcomm, Inc. Snapdragon WSA8830
Qualcomm, Inc. Snapdragon WSA8832
Qualcomm, Inc. Snapdragon WSA8835
Qualcomm, Inc. Snapdragon WSA8840
Qualcomm, Inc. Snapdragon WSA8845
Qualcomm, Inc. Snapdragon WSA8845H

CWE Classification

CWE-416

References

docs.qualcomm.com /product/publicresources/securitybulletin/october-2025-bulletin.html

{
    "lastseen": "",
    "description": "Memory corruption while allocating buffers in DSP service.",
    "published": "2025-10-09T03:18:15.699Z",
    "modified": "2025-10-09T03:18:15.699Z",
    "type": "cve",
    "title": "Use After Free in DSP Service",
    "source": "qualcomm",
    "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html",
    "id": "CVE-2025-47354",
    "bulletinFamily": "",
    "cwe": [
        "CWE-416"
    ],
    "cvelist": null,
    "sourceData": "Qualcomm, Inc. Snapdragon FastConnect 6200\nQualcomm, Inc. Snapdragon FastConnect 6700\nQualcomm, Inc. Snapdragon FastConnect 7800\nQualcomm, Inc. Snapdragon QMP1000\nQualcomm, Inc. Snapdragon SM6475\nQualcomm, Inc. Snapdragon SM7435\nQualcomm, Inc. Snapdragon SM8735\nQualcomm, Inc. Snapdragon SM8750\nQualcomm, Inc. Snapdragon SM8750P\nQualcomm, Inc. Snapdragon Snapdragon 4 Gen 2 Mobile Platform\nQualcomm, Inc. Snapdragon Snapdragon 6 Gen 1 Mobile Platform\nQualcomm, Inc. Snapdragon Snapdragon W5+ Gen 1 Wearable Platform\nQualcomm, Inc. Snapdragon SW5100\nQualcomm, Inc. Snapdragon SW5100P\nQualcomm, Inc. Snapdragon SXR2330P\nQualcomm, Inc. Snapdragon SXR2350P\nQualcomm, Inc. Snapdragon WCD9370\nQualcomm, Inc. Snapdragon WCD9375\nQualcomm, Inc. Snapdragon WCD9378\nQualcomm, Inc. Snapdragon WCD9380\nQualcomm, Inc. Snapdragon WCD9385\nQualcomm, Inc. Snapdragon WCD9395\nQualcomm, Inc. Snapdragon WCN3950\nQualcomm, Inc. Snapdragon WCN3988\nQualcomm, Inc. Snapdragon WCN6755\nQualcomm, Inc. Snapdragon WCN7750\nQualcomm, Inc. Snapdragon WCN7860\nQualcomm, Inc. Snapdragon WCN7861\nQualcomm, Inc. Snapdragon WCN7880\nQualcomm, Inc. Snapdragon WCN7881\nQualcomm, Inc. Snapdragon WSA8810\nQualcomm, Inc. Snapdragon WSA8815\nQualcomm, Inc. Snapdragon WSA8830\nQualcomm, Inc. Snapdragon WSA8832\nQualcomm, Inc. Snapdragon WSA8835\nQualcomm, Inc. Snapdragon WSA8840\nQualcomm, Inc. Snapdragon WSA8845\nQualcomm, Inc. Snapdragon WSA8845H",
    "sourceHref": "",
    "cvss": {
        "score": 7.8,
        "severity": "HIGH",
        "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Snapdragon",
    "version": "FastConnect 6200",
    "vendor": "Qualcomm, Inc.",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}