CVE-2025-36904

A critical OOB write vulnerability exists in the Broadcom Wi-Fi driver within the wl_android_get_best_channels function. This occurs because the drive...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

A critical OOB write vulnerability exists in the Broadcom Wi-Fi driver within the wl_android_get_best_channels function. This occurs because the driver doesn't validate the list->count value received from the firmware, leading to a potential buffer overflow when accessing list->element[j].

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

影響パッケージ

Android :unknown:

[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2025-09-05"}]}]

参照URL

advisory source.android.com