High severity8.0NVD Advisory· Published Dec 11, 2025· Updated Oct 7, 2026
CVE-2025-36923
CVE-2025-36923
Description
In NrmmDecoder::DecodeSORTransparentContext of cn_NrmmDecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
1- source.android.com/security/bulletin/pixel/2025-12-01nvdVendor Advisory
News mentions
0No linked articles in our index yet.