Skip to content
OpenAdvisories
High · 7.8 CVE-2025-36903 EUVD-2025-26681GHSA-42g5-9rq6-mwjw

In lwis_io_buffer_write, there is a possible OOB read/write due to improper input validation. This could lead to local escalation of privil…

Published Sep 4, 2025 · Updated Feb 26, 2026 · Assigned by Google_Devices

Description

In lwis_io_buffer_write, there is a possible OOB read/write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References