PT-2025-50706 · Unknown · Ss Lcsmanagement

Published 2025-12-11 · Updated 2025-12-13 · CVE-2025-36924

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ss LcsManagement (affected versions not specified)

Description The ss DecodeLcsAssistDataReqMsg() function within ss LcsManagement.c contains a flaw related to an incorrect bounds check, potentially leading to an out-of-bounds write. Successful exploitation of this issue could allow for remote escalation of privilege without requiring additional execution privileges or user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-120

Related Identifiers

CVE-2025-36924

Affected Products

Ss Lcsmanagement

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-36924 · Security Note
• https://source.android.com/security/bulletin/pixel/2025-12-01 · Vendor Advisory
• https://twitter.com/CVEnew/status/1999876869319983338 · Twitter Post