CVE-2025-36925: WAVES_send_data_to_dsp Out of Bounds Write Vulnerability in Android Package
Summary
CVE-2025-36925: In WAVES_send_data_to_dsp of libaoc_waves.c, there is a possible out of bounds write due to a missing bounds check. Affects :unknown: versions >= Pixel-family specific:0, < Pixel-family specific:2025-12-05. Fixed in Pixel-family specific:2025-12-05. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The affected package is part of the Android ecosystem, specifically related to audio processing functionalities. It is utilized in various Pixel devices for managing audio data sent to the digital signal processor (DSP). This package is critical for ensuring high-quality audio performance and seamless user experience in audio-related applications.
Vulnerability Detail
In the WAVES_send_data_to_dsp function of libaoc_waves.c, there exists a potential out of bounds write due to a missing bounds check. This vulnerability can lead to local escalation of privilege, allowing an attacker to gain unauthorized access to system resources without requiring additional execution privileges. The exploitation of this vulnerability does not necessitate user interaction, making it particularly concerning for device security.
How To Fix
Minimum fixed version
Pixel-family specific:2025-12-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. The best course of action is to apply the available patch as soon as it is released.
Conclusion
The CVE-2025-36925 vulnerability presents a significant risk due to its potential for local privilege escalation without user interaction. Users are strongly advised to update their devices to the latest patched version to protect against this vulnerability.
See every vulnerability recorded for :unknown: →
FAQ
CVE-2025-36925 is a vulnerability in the WAVES_send_data_to_dsp function that allows for an out of bounds write, potentially leading to local privilege escalation.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which monitors and alerts for open-source vulnerabilities.
No, user interaction is not needed for exploitation, making this vulnerability particularly dangerous.
While there are no specific workarounds, it is crucial to apply the patch as soon as possible to mitigate the risk.
Vulert is a tool that monitors and alerts for open-source vulnerabilities in software using just the gradle.lockfile. It provides real-time alerts without requiring code access or installation.
References
Related vulnerabilities
Recent vulnerabilities recorded for :unknown:.
