Out-of-Bounds Read/Write in Lwis IO Buffer of Android Device

CVE-2025-36903

What is CVE-2025-36903?

The vulnerability identified in the lwis_io_buffer_write function allows for potential out-of-bounds read and write operations due to inadequate input validation. This security flaw could enable local privilege escalation, with no need for additional execution privileges or user interaction, thereby enhancing the risk of exploitation on affected Android devices.

References