CVE-2026-25258

Out-of-bounds Read in DSP Service

State: Published
Severity: 7.8 High
Published: Jun 1, 2026
Updated: Jun 3, 2026
Reserved: Feb 2, 2026

Description

Memory corruption while processing IOCTL calls for escape operations.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	qualcomm

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	CologneAffected FastConnect 6900Affected FastConnect 7800Affected QCA0000Affected SC8380XPAffected WCD9378CAffected WCD9380Affected WCD9385Affected WSA8840Affected WSA8845Affected WSA8845HAffected X2000077Affected X2000086Affected X2000090Affected X2000092Affected X2000094Affected XG101002Affected XG101032Affected XG101039Affected

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.