CVE-2025-36902

The Synaptics TouchCom driver is affected by a heap buffer overflow in the syna_cdev_ioctl_store_pid() function of syna_tcm2_sysfs.c. This vulnerability allows for a possible out-of-bounds write , which could lead to a local escalation of privilege (EoP). Exploitation requires System execution pr...

PT-2025-36663

In syna cdev ioctl store pid of syna tcm2 sysfs.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...