Skip to content
OpenAdvisories
High · 7.8 CVE-2025-36932 EUVD-2025-202885GHSA-948m-jh25-pf7p

In tracepoint_msg_handler of cpm/google/lib/tracepoint/tracepoint_ipc.c, there is a possible memory overwrite due to improper input validat…

Published Dec 11, 2025 · Updated Feb 26, 2026 · Assigned by Google_Devices

Description

In tracepoint_msg_handler of cpm/google/lib/tracepoint/tracepoint_ipc.c, there is a possible memory overwrite due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References