CVE-2025-36900
In lwis_test_register_io of lwis_device_test.c, there is a possible OOB Write due to an integer overflow
Medium · published September 4, 2025
What it is
In lwis_test_register_io of lwis_device_test.c, there is a possible OOB Write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
The record
Technical detail
- CVSS v3.1
- 6.7 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00082 · 0.2th percentile
- Published
- 2025-09-04T04:56Z
EPSS history
Timeline