CVE-2025-47388: Buffer Copy without Checking Size of Input in DSP Service
Published Jan 6, 2026
·Updated
Memory corruption while passing pages to DSP with an unaligned starting address.
Affected Software
92 affected componentsFixes available
All of the following
Qualcomm Fastconnect 6200 Firmware
Qualcomm Fastconnect 6200
All of the following
Qualcomm Fastconnect 6700 Firmware
Qualcomm Fastconnect 6700
All of the following
Qualcomm Fastconnect 6900 Firmware
Qualcomm Fastconnect 6900
All of the following
Qualcomm Fastconnect 7800 Firmware
Qualcomm Fastconnect 7800
All of the following
Qualcomm Qcs610 Firmware
Qualcomm Qcs610
All of the following
Qualcomm Qmp1000 Firmware
Qualcomm Qmp1000
All of the following
Qualcomm Video Collaboration Vc1 Platform Firmware
Qualcomm Video Collaboration Vc1 Platform
All of the following
Qualcomm Video Collaboration Vc3 Platform Firmware
Qualcomm Video Collaboration Vc3 Platform
All of the following
Qualcomm Sg6150 Firmware
Qualcomm Sg6150
All of the following
Qualcomm Sg6150p Firmware
Qualcomm Sg6150p
All of the following
Qualcomm Sm6475 Firmware
Qualcomm Sm6475
All of the following
Qualcomm Sm7435 Firmware
Qualcomm Sm7435
All of the following
Qualcomm Sm8735 Firmware
Qualcomm Sm8735
All of the following
Qualcomm Sm8750 Firmware
Qualcomm Sm8750
All of the following
Qualcomm Sm8750p Firmware
Qualcomm Sm8750p
All of the following
Qualcomm Snapdragon 4 Gen 2 Mobile Platform Firmware
Qualcomm Snapdragon 4 Gen 2 Mobile Platform
All of the following
Qualcomm Snapdragon 6 Gen 1 Mobile Platform Firmware
Qualcomm Snapdragon 6 Gen 1 Mobile Platform
All of the following
Qualcomm Snapdragon W5\+ Gen 1 Wearable Platform Firmware
Qualcomm Snapdragon W5\+ Gen 1 Wearable Platform
All of the following
Qualcomm Sw5100 Firmware
Qualcomm Sw5100
All of the following
Qualcomm Sw5100p Firmware
Qualcomm Sw5100p
All of the following
Qualcomm Sxr2330p Firmware
Qualcomm Sxr2330p
All of the following
Qualcomm Sxr2350p Firmware
Qualcomm Sxr2350p
All of the following
Qualcomm Wcd9370 Firmware
Qualcomm Wcd9370
All of the following
Qualcomm Wcd9375 Firmware
Qualcomm Wcd9375
All of the following
Qualcomm Wcd9378 Firmware
Qualcomm Wcd9378
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
All of the following
Qualcomm Wcd9395 Firmware
Qualcomm Wcd9395
All of the following
Qualcomm Wcn3950 Firmware
Qualcomm Wcn3950
All of the following
Qualcomm Wcn3980 Firmware
Qualcomm Wcn3980
All of the following
Qualcomm Wcn3988 Firmware
Qualcomm Wcn3988
All of the following
Qualcomm Wcn6755 Firmware
Qualcomm Wcn6755
All of the following
Qualcomm Wcn7750 Firmware
Qualcomm Wcn7750
All of the following
Qualcomm Wcn7860 Firmware
Qualcomm Wcn7860
All of the following
Qualcomm Wcn7861 Firmware
Qualcomm Wcn7861
All of the following
Qualcomm Wcn7880 Firmware
Qualcomm Wcn7880
All of the following
Qualcomm Wcn7881 Firmware
Qualcomm Wcn7881
All of the following
Qualcomm Wsa8810 Firmware
Qualcomm Wsa8810
All of the following
Qualcomm Wsa8815 Firmware
Qualcomm Wsa8815
All of the following
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
All of the following
Qualcomm Wsa8832 Firmware
Qualcomm Wsa8832
All of the following
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
All of the following
Qualcomm Wsa8840 Firmware
Qualcomm Wsa8840
All of the following
Qualcomm Wsa8845 Firmware
Qualcomm Wsa8845
All of the following
Qualcomm Wsa8845h Firmware
Qualcomm Wsa8845h
Google Android
android/platform/vendor/qcom/opensource/dsp-kernel>=SoCVersion:0<SoCVersion:2026-03-05
SoCVersion:2026-03-05
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom/opensource/dsp-kernelto a version that resolves this vulnerability.Fixed in SoCVersion:2026-03-05
Event History
Jan 6, 2026
CVE Published
via MITRE·10:48 PM
Data Sourced
via MITRE·10:48 PM
DescriptionSeverityWeakness
Jan 7, 2026
Data Sourced
via NVD·12:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Mar 1, 2026
Advisory Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software
Mar 2, 2026
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-47388?
The severity of CVE-2025-47388 is classified as high due to potential memory corruption issues.
2
How do I fix CVE-2025-47388?
To fix CVE-2025-47388, you should update to the latest firmware version provided by Qualcomm that addresses the vulnerability.
3
What types of devices are affected by CVE-2025-47388?
CVE-2025-47388 affects Qualcomm Fastconnect 6200, 6700, 6900, and other related firmware across various hardware platforms.
4
What should I do if I am using affected firmware related to CVE-2025-47388?
If you are using affected firmware, it is recommended to apply the latest security updates from Qualcomm as soon as possible.
5
Is the CVE-2025-47388 vulnerability actively being exploited?
There is currently no public information indicating that CVE-2025-47388 is being actively exploited.