CVE-2025-36894 – This vulnerability allows remote attackers to c... (How to Fix)

Q: What is the severity of CVE-2025-36894?

CVE-2025-36894 has a CVSS score of 7.5 (HIGH). This vulnerability allows remote attackers to cause a denial of service (DoS) in affected systems without requiring authentication or user interaction. The issue stems from a missing null pointer check that can be exploited to crash the system. This affects Android Pixel devices running vulnerable versions.

📋 TL;DR

This vulnerability allows remote attackers to cause a denial of service (DoS) in affected systems without requiring authentication or user interaction. The issue stems from a missing null pointer check that can be exploited to crash the system. This affects Android Pixel devices running vulnerable versions.

💻 Affected Systems

Products:

Google Pixel devices

Versions: Android versions prior to September 2025 security patch

Operating Systems: Android

Default Config Vulnerable: ⚠️ Yes

Notes: Specifically affects Pixel devices as referenced in the Android security bulletin.

📦 What is this software?

Android by Google

View all CVEs affecting Android →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete system crash requiring reboot, potentially disrupting critical services on affected devices.

🟠

Likely Case

Service disruption on vulnerable Pixel devices, requiring manual intervention to restore functionality.

🟢

If Mitigated

Minimal impact with proper network segmentation and updated systems.

🌐 Internet-Facing: HIGH - Remote exploitation without authentication makes internet-facing systems particularly vulnerable.

🏢 Internal Only: MEDIUM - Internal systems could still be exploited by malicious insiders or compromised internal devices.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ⚠️ Yes

Complexity: LOW

No authentication required and no user interaction needed makes exploitation straightforward if details become public.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: September 2025 Android security patch level

Vendor Advisory: https://source.android.com/security/bulletin/pixel/2025-09-01

Restart Required: Yes

Instructions:

1. Navigate to Settings > System > System update on Pixel device. 2. Check for and install September 2025 security update. 3. Restart device when prompted.

🔧 Temporary Workarounds

Network segmentation

all

Isolate vulnerable Pixel devices from untrusted networks to prevent remote exploitation.

🧯 If You Can't Patch

Segment vulnerable devices on isolated network segments
Implement strict network access controls to limit exposure

🔍 How to Verify

Check if Vulnerable:

Check Android version and security patch level in Settings > About phone > Android version

Check Version:

adb shell getprop ro.build.version.security_patch

Verify Fix Applied:

Verify security patch level shows 'September 5, 2025' or later in Settings > About phone

📡 Detection & Monitoring

Log Indicators:

Unexpected process crashes
System reboot events without user action
Kernel panic logs

Network Indicators:

Unusual traffic patterns to Pixel device management interfaces
Connection attempts followed by service disruption

SIEM Query:

source="android_logs" AND (event_type="crash" OR event_type="reboot") AND device_type="pixel"

📊 Metadata

CVE ID: CVE-2025-36894

CVSS v3 Score: 7.5 (HIGH)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE: CWE-476

EPSS Score: 0.18% exploit probability (40th percentile)

Published: September 4, 2025

Last Updated: September 5, 2025

🔗 References

https://source.android.com/security/bulletin/pixel/2025-09-01 Vendor Advisory

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2025-36894, you might also want to check these: