CVE-2025-36890

There is a OOB write issue in BCM WiFi driver while handling message from firmware. Function wl_notify_scan_status is called when received the event W...

Original description

The description as published by the source.

There is a OOB write issue in BCM WiFi driver while handling message from firmware. Function wl_notify_scan_status is called when received the event WLC_E_SCAN_COMPLETE from firmware.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Android :unknown:

[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2025-09-05"}]}]

References

advisory source.android.com