Heap Buffer Overflow in Android Products by Google

CVE-2025-36906

What is CVE-2025-36906?

A heap buffer overflow vulnerability exists in the ConvertReductionOp function within darwinn_mlir_converter_aidl.cc of Google Android. This flaw can allow an attacker to cause an out-of-bounds write, potentially leading to unauthorized local escalation of privileges. Exploitation does not require user interaction, making it critical for users to apply security updates to mitigate potential risks.

References