CVE-2025-36925

In WAVESsenddatatodsp of libaocwaves.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36925

A security vulnerability exists in the AOC component of Google Pixel devices due to a missing bounds check in the WAVES_send_data_to_dsp function of libaoc_waves.c. This flaw leads to a possible out-of-bounds write , which could result in a local elevation of privilege without requiring additiona...