CVE-2025-36901

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-396462223.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

No affected versions have been published.

Timeline

Published
Sep 4, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-369026.7In syna_cdev_ioctl_store_pid() of syna_tcm2_sysfs.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead CVE-2025-369037.8In lwis_io_buffer_write, there is a possible OOB read/write due to improper input validation. This could lead to local escalation of privileCVE-2025-369049.8WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-396458384.CVE-2025-369057.8In gxp_mapping_create of gxp_mapping.c, there is a possible privilege escalation due to a logic error in the code. This could lead to local CVE-2025-369067.8In ConvertReductionOp of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lCVE-2025-369077.3In draw_surface_image() of abl/android/lib/draw/draw.c, there is a possible out of bounds write due to a heap buffer overflow. This could leCVE-2025-369086.7In lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to lCVE-2025-369095.3Information disclosureCVE-2025-36915.3A vulnerability was found in mirweiye Seven Bears Library CMS 2023. It has been classified as problematic. Affected is an unknown function oCVE-2025-369117.1In key-based pairing, there is a possible ID due to a logic error in the code. This could lead to remote (proximal/adjacent) information disCVE-2025-369126.5In cellular modem, there is a possible denial of service due to a logic error in the code. This could lead to remote denial of service with CVE-2025-369167.0In PrepareWorkloadBuffers of gxp_main_actor.cc, there is a possible double fetch due to a race condition. This could lead to local escalatio
CVE-2025-36901: High severity, CVSS 8.8 | Vulnix