Out of Bounds Write Vulnerability in Android's LibAOC WAVES Product

CVE-2025-36925

What is CVE-2025-36925?

A vulnerability exists in the WAVES_send_data_to_dsp function of libaoc_waves.c, leading to a potential out of bounds write. This flaw arises due to an absence of adequate bounds checks, allowing an attacker to escalate privileges locally without needing any additional execution privileges. Notably, this exploitation does not require any user interaction, highlighting a significant security risk that could affect the integrity of devices utilizing this component.

References