CVE-2025-36922
Last modified
CVE-2025-36922 is a medium-severity vulnerability rated 6.7/10 on the CVSS scale. In bigo_map of bigo_iommu.c, there is a possible information disclosure due to a use after free. This could lead to local escalation of privilege in the OS Kernel level with System execution privileges needed. EPSS estimates a 0.07% chance of exploitation in the next 30 days.
Description
In bigo_map of bigo_iommu.c, there is a possible information disclosure due to a use after free. This could lead to local escalation of privilege in the OS Kernel level with System execution privileges needed. User interaction is not needed for exploitation.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Android | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-36922?
How severe is CVE-2025-36922?
How do I fix CVE-2025-36922?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-36917In SwDcpItg of up_L2commonPdcpSecurity.cpp, there is a possi…6.5
- CVE-2025-36918In aoc_service_read_message of aoc_ipc_core.c, there is a po…7.8
- CVE-2025-36919In aocc_read of aoc_channel_dev.c, there is a possible doubl…7.8
- CVE-2025-3692A vulnerability was found in SourceCodester Online Eyewear S…5.4
- CVE-2025-36920In hyp_alloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a …8.4
- CVE-2025-36921In ProtocolPsUnthrottleApn() of protocolpsadapter.cpp, there…5.5
- CVE-2025-36923In NrmmDecoder::DecodeSORTransparentContext of cn_NrmmDecode…8
- CVE-2025-36924In ss_DecodeLcsAssistDataReqMsg(void) of ss_LcsManagement.c,…8
- CVE-2025-36925In WAVES_send_data_to_dsp of libaoc_waves.c, there is a poss…7.8
- CVE-2025-36927In GetTachyonCommand of tachyon_server_common.h, there is a …7.8
- CVE-2025-36928In GetHostAddress of gxp_buffer.h, there is a possible out o…7.8
- CVE-2025-36929In AreFencesRegistered of gxp_fence_manager.cc, there is a p…5.5
Are you affected by CVE-2025-36922?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST