CVE-2026-25271

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Published Jul 6, 2026 CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Description
Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between check and use.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Qualcomm
Qualcomm snapdragon
Vendors & Products Qualcomm
Qualcomm snapdragon
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between check and use.
Title Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Weaknesses CWE-367
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
qualcomm
Published
Updated
Jul 7, 2026, 3:56 AM
Reserved
Feb 2, 2026, 4:19 AM
Status
Analyzed
Published
Jul 6, 2026, 9:16 PM
Modified
Oct 25, 2026, 8:10 PM