CVE-2025-36907 | Google Android draw.c draw_surface_image out-of-bounds write

A vulnerability was found in Google Android and classified as critical. This issue affects the function draw_surface_image in the library abl/android/lib/draw/draw.c. Executing manipulation can lead to out-of-bounds write.

This vulnerability is registered as CVE-2025-36907. The attack needs to be launched locally. No exploit is available.

Applying a patch is advised to resolve this issue.