CVE-2025-36929
📋 TL;DR
This vulnerability in Android's graphics subsystem allows local information disclosure without requiring user interaction or elevated privileges. It affects Pixel devices running vulnerable Android versions, potentially exposing sensitive memory contents to local attackers.
💻 Affected Systems
- Google Pixel devices
📦 What is this software?
Android by Google
⚠️ Risk & Real-World Impact
Worst Case
An attacker could read sensitive kernel memory containing passwords, encryption keys, or other protected data, leading to complete system compromise.
Likely Case
Limited information leak exposing non-critical system data or application memory, potentially enabling further attacks.
If Mitigated
No impact if patched; unpatched systems remain vulnerable to local information disclosure.
🎯 Exploit Status
Exploitation requires local access and understanding of graphics subsystem internals; no public exploit code is known.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: December 2025 Android security update
Vendor Advisory: https://source.android.com/security/bulletin/pixel/2025-12-01
Restart Required: Yes
Instructions:
1. Go to Settings > System > System update. 2. Check for and install the December 2025 security update. 3. Restart the device when prompted.
🔧 Temporary Workarounds
No effective workarounds
allThis is a kernel-level vulnerability requiring patching; no configuration changes can mitigate it.
🧯 If You Can't Patch
- Restrict physical access to devices and limit app installation to trusted sources only
- Monitor for suspicious local activity and implement application allowlisting
🔍 How to Verify
Check if Vulnerable:
Check Android security patch level in Settings > About phone > Android version > Security updateCheck Version:
adb shell getprop ro.build.version.security_patchVerify Fix Applied:
Verify security patch level shows 'December 5, 2025' or later📡 Detection & Monitoring
Log Indicators:
- Unusual graphics driver errors in kernel logs
- Suspicious memory access patterns
Network Indicators:
- None - this is a local vulnerability
SIEM Query:
Not applicable for network detection; monitor device logs for graphics subsystem anomalies