Vulnerability in Google Android
CVE-2025-36920
In hyp_alloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is…
EPSS: 0.000 (3.9th percentile) — read the EPSS interpretation.
Affected products
- Google Android — versions Android kernel