CVE-2025-36900

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In lwis_test_register_io of lwis_device_test.c, there is a possible OOB Write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Sep 4, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-369018.8WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-396462223.CVE-2025-369026.7In syna_cdev_ioctl_store_pid() of syna_tcm2_sysfs.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead CVE-2025-369037.8In lwis_io_buffer_write, there is a possible OOB read/write due to improper input validation. This could lead to local escalation of privileCVE-2025-369049.8WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-396458384.CVE-2025-369057.8In gxp_mapping_create of gxp_mapping.c, there is a possible privilege escalation due to a logic error in the code. This could lead to local CVE-2025-369067.8In ConvertReductionOp of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lCVE-2025-369077.3In draw_surface_image() of abl/android/lib/draw/draw.c, there is a possible out of bounds write due to a heap buffer overflow. This could leCVE-2025-369086.7In lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to lCVE-2025-369095.3Information disclosureCVE-2025-36915.3A vulnerability was found in mirweiye Seven Bears Library CMS 2023. It has been classified as problematic. Affected is an unknown function oCVE-2025-369117.1In key-based pairing, there is a possible ID due to a logic error in the code. This could lead to remote (proximal/adjacent) information disCVE-2025-369126.5In cellular modem, there is a possible denial of service due to a logic error in the code. This could lead to remote denial of service with
CVE-2025-36900: Medium severity, CVSS 6.7 | Vulnix