CVE-2025-47354: Use After Free in DSP Service
Published Oct 9, 2025
·Updated
Memory corruption while allocating buffers in DSP service.
Affected Software
78 affected componentsFixes available
All of the following
Qualcomm Fastconnect 6200 Firmware
Qualcomm Fastconnect 6200
All of the following
Qualcomm Fastconnect 6700 Firmware
Qualcomm Fastconnect 6700
All of the following
Qualcomm Fastconnect 7800 Firmware
Qualcomm Fastconnect 7800
All of the following
Qualcomm Qmp1000 Firmware
Qualcomm Qmp1000
All of the following
Qualcomm Sm6475 Firmware
Qualcomm Sm6475
All of the following
Qualcomm Sm7435 Firmware
Qualcomm Sm7435
All of the following
Qualcomm Sm8735 Firmware
Qualcomm Sm8735
All of the following
Qualcomm Sm8750 Firmware
Qualcomm Sm8750
All of the following
Qualcomm Sm8750p Firmware
Qualcomm Sm8750p
All of the following
Qualcomm Snapdragon 4 Gen 2 Mobile Platform Firmware
Qualcomm Snapdragon 4 Gen 2 Mobile Platform
All of the following
Qualcomm Snapdragon 6 Gen 1 Mobile Platform Firmware
Qualcomm Snapdragon 6 Gen 1 Mobile Platform
All of the following
Qualcomm Snapdragon W5\+ Gen 1 Wearable Platform Firmware
Qualcomm Snapdragon W5\+ Gen 1 Wearable Platform
All of the following
Qualcomm Sw5100 Firmware
Qualcomm Sw5100
All of the following
Qualcomm Sw5100p Firmware
Qualcomm Sw5100p
All of the following
Qualcomm Sxr2330p Firmware
Qualcomm Sxr2330p
All of the following
Qualcomm Sxr2350p Firmware
Qualcomm Sxr2350p
All of the following
Qualcomm Wcd9370 Firmware
Qualcomm Wcd9370
All of the following
Qualcomm Wcd9375 Firmware
Qualcomm Wcd9375
All of the following
Qualcomm Wcd9378 Firmware
Qualcomm Wcd9378
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
All of the following
Qualcomm Wcd9395 Firmware
Qualcomm Wcd9395
All of the following
Qualcomm Wcn3950 Firmware
Qualcomm Wcn3950
All of the following
Qualcomm Wcn3988 Firmware
Qualcomm Wcn3988
All of the following
Qualcomm Wcn6755 Firmware
Qualcomm Wcn6755
All of the following
Qualcomm Wcn7750 Firmware
Qualcomm Wcn7750
All of the following
Qualcomm Wcn7860 Firmware
Qualcomm Wcn7860
All of the following
Qualcomm Wcn7861 Firmware
Qualcomm Wcn7861
All of the following
Qualcomm Wcn7880 Firmware
Qualcomm Wcn7880
All of the following
Qualcomm Wcn7881 Firmware
Qualcomm Wcn7881
All of the following
Qualcomm Wsa8810 Firmware
Qualcomm Wsa8810
All of the following
Qualcomm Wsa8815 Firmware
Qualcomm Wsa8815
All of the following
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
All of the following
Qualcomm Wsa8832 Firmware
Qualcomm Wsa8832
All of the following
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
All of the following
Qualcomm Wsa8840 Firmware
Qualcomm Wsa8840
All of the following
Qualcomm Wsa8845 Firmware
Qualcomm Wsa8845
All of the following
Qualcomm Wsa8845h Firmware
Qualcomm Wsa8845h
Google Android
android/platform/vendor/qcom/opensource/dsp-kernel>=SoCVersion:0<SoCVersion:2025-12-05
SoCVersion:2025-12-05
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom/opensource/dsp-kernelto a version that resolves this vulnerability.Fixed in SoCVersion:2025-12-05
Event History
Oct 9, 2025
CVE Published
via MITRE·03:18 AM
Data Sourced
via MITRE·03:18 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 AM
DescriptionSeverityWeaknessAffected Software
Dec 1, 2025
Advisory Published
via OSV·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-47354?
The severity of CVE-2025-47354 is classified as high due to its potential for memory corruption during buffer allocation.
2
How do I fix CVE-2025-47354?
To fix CVE-2025-47354, update the affected Qualcomm firmware to the latest version provided by the vendor.
3
What software is affected by CVE-2025-47354?
CVE-2025-47354 affects several Qualcomm firmware versions, including those for the Fastconnect, Snapdragon, and WCN series.
4
What kind of attack can exploit CVE-2025-47354?
CVE-2025-47354 can potentially be exploited to cause denial of service or arbitrary code execution due to memory corruption.
5
How can I mitigate the risks associated with CVE-2025-47354?
To mitigate the risks of CVE-2025-47354, ensure that all affected systems are patched and monitor for any unusual activity.