CVE-2025-36928CWE-120CWE-787

CVE-2025-36928

High · published December 12, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
0.6
In the wild
Unconfirmed
What it is

⚡ A sneaky out-of-bounds write in gxp_buffer.h could let an attacker escalate their privileges without breaking a sweat! Think of it like a sneaky access card that lets you into data rooms you were never meant to enter — no need to swipe twice or even be asked your name! This vulnerability allows an attacker to slip right past security checks and into sensitive areas without raising any alarms. If exploited, this could lead to an attacker gaining local escalated privileges, potentially allowing them to wreak havoc on your system. Imagine someone gaining the keys to your server's control room, where they can manipulate data, change configurations, or even lock you out entirely — absolutely devastating!

Put simply

Think of it like a sneaky access card that lets you into data rooms you were never meant to enter — no need to swipe twice or even be asked your name! This vulnerability allows an attacker to slip right past security checks and into sensitive areas without raising any alarms. This vulnerability arises from an incorrect bounds check in the GetHostAddress function of gxp_buffer.h, leading to the possibility of an out-of-bounds write with no additional execution privileges required.

What to do

If exploited, this could lead to an attacker gaining local escalated privileges, potentially allowing them to wreak havoc on your system. Imagine someone gaining the keys to your server's control room, where they can manipulate data, change configurations, or even lock you out entirely — absolutely devastating! To mitigate this risk, update to the latest version of the affected component as soon as possible. Conduct a thorough code review focusing on buffer management and bounds checking, ensuring all potential gaps like this one are sealed tight. Stay proactive and audit your systems regularly! You've got this! Follow these steps, and you'll be well on your way to securing your environment. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00095 · 0.6th percentile
Weaknesses
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'); CWE-787 · Out-of-bounds Write
Published
2025-12-12T01:15Z
Affected products (1)
ProductVersionsFixed in
google/androidall versions—
References (1)
EPSS history
Timeline
  • 11 DEC 19:35Z
    In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to an incorrect bounds check
    cvelistv5