CVE-2025-27056: Use After Free in DSP Service
Memory corruption during sub-system restart while processing clean-up to free up resources.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom/opensource/dsp-kernelto a version that resolves this vulnerability.Fixed in SoCVersion:2025-09-05
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27056?
The severity of CVE-2025-27056 is classified as high due to potential memory corruption issues during sub-system restarts.
How do I fix CVE-2025-27056?
To fix CVE-2025-27056, update the firmware of affected Qualcomm devices to the latest version recommended by the manufacturer.
What devices are affected by CVE-2025-27056?
CVE-2025-27056 affects various Qualcomm firmware, including Fastconnect 7800 and Snapdragon 8 Gen 3 Mobile, among others.
What are the potential impacts of CVE-2025-27056?
The potential impacts of CVE-2025-27056 include system crashes and the possibility of unauthorized access or control due to memory corruption.
Is there a workaround for CVE-2025-27056?
Currently, there are no known workarounds for CVE-2025-27056, and applying the firmware update is the recommended mitigation.