CVE-2025-36937: Critical severity Google Android vulnerability
In AudioDecoder::HandleProduceRequest of audiodecoder.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-36937?
CVE-2025-36937 has a critical severity rating due to potential remote code execution.
How do I fix CVE-2025-36937?
To address CVE-2025-36937, ensure that your Android device is updated with the latest security patches from Google.
What types of devices are affected by CVE-2025-36937?
CVE-2025-36937 affects Google Android devices as specified in the vulnerability report.
Can CVE-2025-36937 be exploited without user interaction?
Yes, CVE-2025-36937 can be exploited remotely without any user interaction required.
What impact does CVE-2025-36937 have on an affected system?
The impact of CVE-2025-36937 includes the possibility of remote code execution, which can compromise the affected system.