CVE-2025-21436

Use After Free in DSP Service

State: Published
Severity: 7.8 High
Published: Apr 7, 2025
Updated: Feb 26, 2026
Reserved: Dec 18, 2024

Description

Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	qualcomm

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	FastConnect 7800Affected QMP1000Affected SM8735Affected SM8750Affected SM8750PAffected Snapdragon 8 Gen 3 Mobile PlatformAffected Snapdragon W5+ Gen 1 Wearable PlatformAffected SW5100Affected SW5100PAffected SXR2330PAffected WCD9378Affected WCD9380Affected WCD9390Affected WCD9395Affected WCN7750Affected WCN7860Affected WCN7861Affected WCN7880Affected WCN7881Affected WSA8830Affected WSA8832Affected WSA8835Affected WSA8840Affected WSA8845Affected WSA8845HAffected

Product

Versions

SnapdragonQualcomm, Inc.

FastConnect 7800Affected
QMP1000Affected
SM8735Affected
SM8750Affected
SM8750PAffected
Snapdragon 8 Gen 3 Mobile PlatformAffected
Snapdragon W5+ Gen 1 Wearable PlatformAffected
SW5100Affected
SW5100PAffected
SXR2330PAffected
WCD9378Affected
WCD9380Affected
WCD9390Affected
WCD9395Affected
WCN7750Affected
WCN7860Affected
WCN7861Affected
WCN7880Affected
WCN7881Affected
WSA8830Affected
WSA8832Affected
WSA8835Affected
WSA8840Affected
WSA8845Affected
WSA8845HAffected

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.