CVE-2025-36922CWE-416

CVE-2025-36922

Medium · published December 12, 2025

CVSS v3.1
6.7
EPSS
0%
Percentile
0.1
In the wild
Unconfirmed
What it is

In bigo_map of bigo_iommu.c, there is a possible information disclosure due to a use after free. This could lead to local escalation of privilege in the OS Kernel level with System execution privileges needed. User interaction is not needed for exploitation.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00079 · 0.1th percentile
Weakness
CWE-416 · Use After Free
Published
2025-12-12T01:15Z
Affected products (1)
ProductVersionsFixed in
google/androidall versions—
References (1)
https://source.android.com/security/bulletin/pixel/2025-12-01 · [email protected]
EPSS history
Timeline
  • 11 DEC 19:35Z
    In bigo_map of bigo_iommu.c, there is a possible information disclosure due to a use after free
    cvelistv5