CVE-2025-21436CWE-416

Use After Free in DSP Service

High · published April 7, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
1.1
In the wild
Unconfirmed
What it is

Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00107 · 1.1th percentile
Weakness
CWE-416 · Use After Free
Published
2025-04-07T10:16Z
EPSS history
Timeline
  • 07 APR 10:16Z
    Use After Free in DSP Service
    cvelistv5