{"id":"ASB-A-409047405","aliases":["4005840","A-409047405","CVE-2025-27056"],"modified":"2026-09-23T18:42:52.954000943Z","published":"2025-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-09-01"},{"type":"FIX","url":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/02243b99b2e8b44d2ee24268982a7227b9a5e224"}],"affected":[{"package":{"name":"platform/vendor/qcom/opensource/dsp-kernel","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2025-09-05"}]}],"versions":["SoCVersion"],"ecosystem_specific":{"spl":"2025-09-05","types":["Unknown"],"vanir_signatures":[{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/commit/02243b99b2e8b44d2ee24268982a7227b9a5e224","target":{"file":"dsp/fastrpc.c","function":"fastrpc_channel_update_invoke_cnt"},"deprecated":false,"digest":{"length":351,"function_hash":"181017009948978269441075178279876196892"},"id":"ASB-A-409047405-07f8bd81","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/commit/02243b99b2e8b44d2ee24268982a7227b9a5e224","target":{"file":"dsp/fastrpc.c","function":"fastrpc_user_obj_free"},"deprecated":false,"digest":{"function_hash":"61710760126938139478328642411388812531","length":3899},"id":"ASB-A-409047405-2f18dc2f"},{"id":"ASB-A-409047405-353396a6","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/commit/02243b99b2e8b44d2ee24268982a7227b9a5e224","target":{"file":"dsp/fastrpc.c","function":"fastrpc_multidomain_ctx_dsp_send"},"deprecated":false,"digest":{"length":1227,"function_hash":"151568829278454943038241006568675430517"}},{"source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/commit/02243b99b2e8b44d2ee24268982a7227b9a5e224","target":{"file":"dsp/fastrpc_rpmsg.c","function":"fastrpc_rpmsg_remove"},"deprecated":false,"digest":{"function_hash":"250997958966116431489529393464968743357","length":1801},"id":"ASB-A-409047405-3ba336da","signature_type":"Function","signature_version":"v1"},{"digest":{"length":607,"function_hash":"37366706680968906687745322042510317447"},"id":"ASB-A-409047405-58b6c6eb","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/commit/02243b99b2e8b44d2ee24268982a7227b9a5e224","target":{"file":"dsp/fastrpc.c","function":"fastrpc_get_frpc_tgid"},"deprecated":false},{"digest":{"function_hash":"44996868655433252933500712855538988903","length":1832},"id":"ASB-A-409047405-6fd83617","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/commit/02243b99b2e8b44d2ee24268982a7227b9a5e224","target":{"file":"dsp/fastrpc.c","function":"fastrpc_dev_map_dma"},"deprecated":false},{"digest":{"length":1932,"function_hash":"48637432500324492102425390366157311212"},"id":"ASB-A-409047405-92bfc37f","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/commit/02243b99b2e8b44d2ee24268982a7227b9a5e224","target":{"file":"dsp/fastrpc.c","function":"fastrpc_device_ioctl"},"deprecated":false},{"target":{"file":"dsp/fastrpc.c"},"deprecated":false,"digest":{"line_hashes":["139734636615963646873563617917806846880","229693981595093125454410300615115983242","254341214603020166925099268652764945375","113390734714732350005514869821151182716","105179051117109527986804130915710737268","163317598395747977973771699118841180112","241863523530105068387469998148228545440","100638023268359044764194227458557546420","247319441473286114001512116731971006377","140899610204664013600133650545641268132","46717794355846131470377853176334010112","171917612676066512547577204816865845245","140126807602290353875104880207421000341","262424483790630478794099069330946741009","321990486881910384640316483424311211009","301181542798880037312575001904951694295","112728410883324488789150991969796347762","317697357166001964991733273422482003667","135165222039611442519891302412342788481","49906628482602599666543503730448695252","250996888948894304749475520078448547176","128478652423896798369275281185369903347","20450085769452616171668840753462134804","201702923720716866794206798201410089283","330440996817130635267098298766447897244","272206963209728470544014355106148151629","69237352004307541359141207011283543812","239646525881920977515680745392358192475","256145756317803403143401918223608872014","37743289511006493122795187853029416421","84070930150630593053743659897933059361","257310519605897699727920061366936769403","337866197025909857985383787219845645439","252537194023587272218704610485128366351","12767218244621802109773719945359898455","52679271089628694239506386366299100827","13423291429496877766764392998696736870","32097489886955668926271692653933439655","272206963209728470544014355106148151629","69237352004307541359141207011283543812","227103965836367877803359101159338889532","166353809320064976692396189846420184556","91537413890117870179827558199309874259","274348013003126806703210181269437857846","2084538990091973480920812463730030048","108450778862372666168160261679190414397","136333922143646032845844844621919996686","252537194023587272218704610485128366351","214233133690058751734927301839066565543","242460589662905062748529685500327021824","248250330757902419063082622635211217059","149187180410226842134675714755682087178","120462147709982657539694817225553974443","311161241971376006624581292840370504532","174499282684333094322867314061849054590","61470267544928773443901276215553834978","43553924964387578501264136438698790018","169943508317917634891185122076060330712","65387584286345310575925255013338439892","271220660286558290658320520901309915567","6058085503429238386602145793036300781","45288516531196731593560597520812820702","3510562339576562240963884914836854446","215190182466365431520880039345986995392","3016771128599048322496143215726382370","292230622813853281082136371724930650429","83874403440712179256910196170949337765","133413523064516317583693212464977926477","325464082266519320877012773367364697294","273437910131673628306594426343522891834","311161241971376006624581292840370504532","174499282684333094322867314061849054590","61470267544928773443901276215553834978","271220660286558290658320520901309915567","6058085503429238386602145793036300781","104580828319172832814737940468123635220","3510562339576562240963884914836854446","215190182466365431520880039345986995392","3016771128599048322496143215726382370","292230622813853281082136371724930650429","83874403440712179256910196170949337765","133413523064516317583693212464977926477","20255315120799126149594765462865229243"],"threshold":0.9},"id":"ASB-A-409047405-a0554f17","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/commit/02243b99b2e8b44d2ee24268982a7227b9a5e224"},{"target":{"file":"dsp/fastrpc_rpmsg.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["5895766763324910796504463851810562000","269205708142967330197150928654321488702","37955917896726182910481139421261007023","70473751347380350504261440531225313815","219901208105518201328578393647335331793","287519363585538879224095199952731199237","148050595270758369963473442425388490578"]},"id":"ASB-A-409047405-a2c0cb6c","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/commit/02243b99b2e8b44d2ee24268982a7227b9a5e224"},{"source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/commit/02243b99b2e8b44d2ee24268982a7227b9a5e224","target":{"function":"fastrpc_dev_unmap_dma","file":"dsp/fastrpc.c"},"deprecated":false,"digest":{"function_hash":"178657569252526039925866102881192329105","length":1746},"id":"ASB-A-409047405-b7710bdc","signature_type":"Function","signature_version":"v1"},{"source":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/commit/02243b99b2e8b44d2ee24268982a7227b9a5e224","target":{"file":"dsp/fastrpc_shared.h"},"deprecated":false,"digest":{"line_hashes":["256840931277970564301462029344825286056","309320898602572411251891498955296179415","156328900368892178676248693675042571608","7739299502014976896002919374778048354"],"threshold":0.9},"id":"ASB-A-409047405-bfb9675e","signature_type":"Line","signature_version":"v1"}],"fixes":["https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/02243b99b2e8b44d2ee24268982a7227b9a5e224"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-409047405.json"}}],"schema_version":"1.9.0"}