CVE-2025-36907 – Qualcomm ABL Android Heap Buffer Overflow

CVE ID : CVE-2025-36907

Published : 4 сентября 2025 г. 7:10 | 2 часа ago

Description : In draw_surface_image() of abl/android/lib/draw/draw.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege via USB fastboot, after a bootloader unlock, with no additional execution privileges needed. User interaction is needed for exploitation.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…