CVE-2025-36896

WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-394765106

Critical · published September 4, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
14.6
In the wild
Unconfirmed
What it is

🔥 A critical privilege escalation vulnerability is lurking in Android WLAN on Google Pixel devices! Think of this flaw as a hotel with a hidden door that allows guests to sneak into restricted areas — anyone who knows about it can access whatever they want in your system! An attacker could exploit this vulnerability to elevate their privileges, potentially allowing them to access sensitive data, modify system settings, or even take control of your device entirely. This could lead to devastating consequences, including unauthorized access to personal information and even the ability to install malicious software.

Put simply

Think of this flaw as a hotel with a hidden door that allows guests to sneak into restricted areas — anyone who knows about it can access whatever they want in your system! This vulnerability in the WLAN component allows for privilege escalation due to improper permission checks, meaning that a malicious application could gain higher system privileges than intended, bypassing security measures.

What to do

An attacker could exploit this vulnerability to elevate their privileges, potentially allowing them to access sensitive data, modify system settings, or even take control of your device entirely. This could lead to devastating consequences, including unauthorized access to personal information and even the ability to install malicious software. It's crucial to update your Google Pixel device to the latest software version released after September 5, 2025. Regularly check your device settings for system updates to ensure you’re protected against this vulnerability. Stay vigilant and avoid installing untrusted applications. You've got this! Update your device and keep your data safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00243 · 14.6th percentile
Published
2025-09-04T04:54Z
EPSS history
Timeline
  • 04 SEP 04:54Z
    WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-394765106
    cvelistv5