Out of Bounds Write Vulnerability in Android Products by Google

CVE-2025-36930

What is CVE-2025-36930?

A vulnerability exists in the GetHostAddress function of gxp_buffer.h, which allows for a potential out of bounds write owing to a missing bounds check. This flaw could facilitate local privilege escalation without requiring any additional execution privileges. Notably, exploitation does not require user interaction, enhancing the risk associated with this vulnerability.

References