Skip to content
OpenAdvisories
High · 8.0 CVE-2025-36923 EUVD-2025-202851GHSA-cvhq-q927-gr5q

In NrmmDecoder::DecodeSORTransparentContext of cn_NrmmDecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. T…

Published Dec 11, 2025 · Updated Feb 26, 2026 · Assigned by Google_Devices

Description

In NrmmDecoder::DecodeSORTransparentContext of cn_NrmmDecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References