Out of Bounds Read Vulnerability in Android ProtocolPS Adapter Software by Google

CVE-2025-36921

What is CVE-2025-36921?

An out-of-bounds read vulnerability exists within the ProtocolPsUnthrottleApn() function in protocolpsadapter.cpp of Google's Android system. This flaw arises from a missing bounds check, potentially allowing unauthorized access to sensitive information. Exploitation of this vulnerability can occur without user interaction, although it requires a baseband firmware compromise to be effective.

References