Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-36897 EUVD-2025-26687GHSA-hpcq-8gwp-fp42

In unknown of cd_CnMsgCodecUserApi.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote co…

Published Sep 4, 2025 · Updated Feb 26, 2026 · Assigned by Google_Devices

Description

In unknown of cd_CnMsgCodecUserApi.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References