CVE-2026-25280: Out-of-bounds Write in DSP Service
Published Sep 17, 2026
·Updated
Memory corruption when processing escape handling flow with insufficient user buffer sizes.
Event History
Sep 17, 2026
CVE Published
via MITRE·04:11 AM
Data Sourced
via MITRE·04:11 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attack vector is local and requires low privileges. No user interaction is required.
2
What is the potential impact if exploitation succeeds?
The vulnerability is rated high severity with a 7.8 CVSS score. It may allow high impact to confidentiality, integrity, and availability.