Qualcomm DSP Service Memory Corruption Vulnerability Allowing Process Creation Issues

A memory corruption vulnerability has been identified in the Digital Signal Processor (DSP) service of Qualcomm chipsets. This issue arises during process creation, where an allocation failure at the kernel level leads to improper memory management. The vulnerability is categorized as a Time-of-check Time-of-use (TOCTOU) race condition, allowing for potential exploitation under certain conditions.

Impact

Exploitation of this vulnerability causes memory corruption, which can disrupt normal process execution on the affected DSP.

Remediation

Qualcomm has patched this vulnerability. Instructions for applying the patch can be found in the Qualcomm May 2026 Security Bulletin.