CVE-2025-36904
A critical OOB write vulnerability exists in the Broadcom Wi-Fi driver within the wl_android_get_best_channels function. This occurs because the drive...
Original description
The description as published by the source.
A critical OOB write vulnerability exists in the Broadcom Wi-Fi driver within the wl_android_get_best_channels function. This occurs because the driver doesn't validate the list->count value received from the firmware, leading to a potential buffer overflow when accessing list->element[j].
Affected packages
Android
:unknown:
[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2025-09-05"}]}]
References
- advisory source.android.com