CVE-2025-36925

A security vulnerability exists in the AOC component of Google Pixel devices. The flaw is caused by a missing bounds check in the WAVES_send_data_to_dsp function within libaoc_waves.c, which leads to a possible out of bounds write . This vulnerability could allow for local escalation of privilege...

CVE-2025-36925

In WAVESsenddatatodsp of libaocwaves.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...