CVE-2025-36930CWE-120CWE-787

CVE-2025-36930

High · published December 12, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
0.6
In the wild
Unconfirmed
What it is

⚡ A missing bounds check in gxp_buffer.h can let attackers perform an out-of-bounds write—no extra permissions or user clicks required! Think of it like a well-organized filing cabinet that suddenly lets you write anywhere without checks—imagine the chaos if anyone could just scribble on any document! This vulnerability could lead to local escalation of privileges, allowing an attacker to gain unauthorized access to sensitive information or critical system functionalities. The consequences could be absolutely devastating, compromising data integrity and potentially taking control of the affected system.

Put simply

Think of it like a well-organized filing cabinet that suddenly lets you write anywhere without checks—imagine the chaos if anyone could just scribble on any document! In the GetHostAddress function of gxp_buffer.h, an out-of-bounds write occurs due to a missing bounds check. This allows attackers to overwrite memory and exploit the system without needing additional execution privileges.

What to do

This vulnerability could lead to local escalation of privileges, allowing an attacker to gain unauthorized access to sensitive information or critical system functionalities. The consequences could be absolutely devastating, compromising data integrity and potentially taking control of the affected system. Update your affected systems and libraries to include the latest security patches that address this issue. Conduct a thorough audit of your applications for any other potential vulnerabilities while you're at it! You've got this! With a little diligence, you can secure your systems and protect your data! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00095 · 0.6th percentile
Weaknesses
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'); CWE-787 · Out-of-bounds Write
Published
2025-12-12T01:15Z
Affected products (1)
ProductVersionsFixed in
google/androidall versions—
References (1)
EPSS history
Timeline
  • 11 DEC 19:35Z
    In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check
    cvelistv5