Skip to content
OpenAdvisories
Medium · 6.7 CVE-2025-36902 EUVD-2025-26682GHSA-838j-6h48-w2c3

In syna_cdev_ioctl_store_pid() of syna_tcm2_sysfs.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead…

Published Sep 4, 2025 · Updated Feb 26, 2026 · Assigned by Google_Devices

Description

In syna_cdev_ioctl_store_pid() of syna_tcm2_sysfs.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References