Heap Buffer Overflow in Syna's Touch Controller Management Software
CVE-2025-36902

Currently unrated

Key Information:

Vendor

Google
Status
Android
Vendor
CVE Published:
4 September 2025

What is CVE-2025-36902?

A potential heap buffer overflow in the syna_cdev_ioctl_store_pid() function of syna_tcm2_sysfs.c could permit unauthorized users to exploit this vulnerability, leading to local escalation of privilege. This flaw does not require user interaction for exploitation, making it a notable security concern for devices utilizing Syna's touch controller software. Ensuring timely updates and patches can mitigate possible risks.

Affected Version(s)

Android Android kernel

References

https://source.android.com/security/bulletin/pixel/2025-0...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-36902 : Heap Buffer Overflow in Syna's Touch Controller Management Software