Qualcomm DSP Service Buffer Over-read Vulnerability Allowing Information Disclosure

A buffer over-read vulnerability has been identified in the Digital Signal Processor (DSP) service of certain Qualcomm chipsets. This vulnerability arises from the IOCTL handler callbacks processing data without properly verifying the buffer size, leading to potential information disclosure.

Impact

Exploitation of this vulnerability could result in unauthorized information disclosure by allowing the reading of memory beyond the intended buffer limits.

Remediation

Qualcomm has released a patch for this vulnerability. Instructions for applying the patch can be found in the Qualcomm May 2026 Security Bulletin.