CVE-2025-36896
The conversation details an out-of-bounds (OOB) write vulnerability in the Broadcom (BCM) WiFi driver. Specifically, the wl_cfg80211_wbtext_table_conf...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The conversation details an out-of-bounds (OOB) write vulnerability in the Broadcom (BCM) WiFi driver. Specifically, the wl_cfg80211_wbtext_table_config function is vulnerable. The vulnerability arises from a heap buffer overflow due to the btcfg->count variable being controlled by firmware, leading to an uncontrolled memcpy.
Paquets affectés
Android
:unknown:
[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2025-09-05"}]}]
Références
- advisory source.android.com