Out of Bounds Write Vulnerability in Tachyon Server by Android

CVE-2025-36936

What is CVE-2025-36936?

A potential out of bounds write vulnerability exists in the GetTachyonCommand function within tachyon_server_common.h. This flaw is caused by an integer overflow, which enables local escalation of privilege without requiring additional execution privileges. Notably, exploitation of this vulnerability does not necessitate user interaction, making it a crucial concern for administrators managing systems utilizing this server.

References