CVE-2025-36934High· 7.4▾ TwilightIn bigo_worker_thread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User intera…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 40.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 30.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.10%
Last analysed / modified upstream
In bigo_worker_thread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
androidRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-36922Medium· 6.7In bigo_map of bigo_iommu.c, there is a possible information disclosure due to a use after free
CVE-2025-36916High· 7.0In PrepareWorkloadBuffers of gxp_main_actor.cc, there is a possible double fetch due to a race condition
CVE-2026-56964Medium· 6.4In multiple locations, there is a possible use-after-free due to a race condition
CVE-2022-20566High· 7.8In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking
CVE-2022-20421High· 7.8In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free
CVE-2022-20154Medium· 6.4In lock_sock_nested of sock.c, there is a possible use after free due to a race condition