Qualcomm DSP Service Out-of-bounds Read Vulnerability Allowing Memory Corruption

A memory corruption vulnerability has been identified in Qualcomm DSP Service while processing IOCTL calls for escape operations. This issue involves an out-of-bounds read, which can lead to memory corruption.

Impact

Exploitation of this vulnerability causes memory corruption, which can potentially be exploited to execute arbitrary code or cause a denial-of-service condition.

Remediation

Qualcomm has notified customers about this vulnerability and is actively sharing patches with OEMs. Instructions for applying the patch can be found in the Qualcomm June 2026 Security Bulletin.