Out of Bounds Write Vulnerability in Android Products by Google

CVE-2025-36928

What is CVE-2025-36928?

This vulnerability arises from an out of bounds write issue in the GetHostAddress function of gxp_buffer.h within Android. An improper bounds check can lead to local escalation of privileges, allowing an attacker to exploit the flaw without requiring any additional execution privileges or user interaction. This potentially opens up security loopholes that could be manipulated to compromise device integrity.

References