CVE-2025-36896
The conversation details an out-of-bounds (OOB) write vulnerability in the Broadcom (BCM) WiFi driver. Specifically, the wl_cfg80211_wbtext_table_conf...
Original description
The description as published by the source.
The conversation details an out-of-bounds (OOB) write vulnerability in the Broadcom (BCM) WiFi driver. Specifically, the wl_cfg80211_wbtext_table_config function is vulnerable. The vulnerability arises from a heap buffer overflow due to the btcfg->count variable being controlled by firmware, leading to an uncontrolled memcpy.
Affected packages
Android
:unknown:
[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2025-09-05"}]}]
References
- advisory source.android.com