Vulnerability in Google Android

CVE-2025-36920

In hyp_alloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is…

EPSS: 0.000 (3.9th percentile) — read the EPSS interpretation.

Affected products

References