CVE-2025-36904 WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-396458384

Description

WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-396458384.

Affected products and versions

Product	Affected versions	Fixed in
Android	Versions not published

Other CVEs of Android

The 1729 CVEs of Android →

CVE-2026-58977 In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check 6.7 Medium CVE-2026-58930 An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when… 7.8 High CVE-2026-58927 The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized… 6.7 Medium CVE-2026-58926 A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free a `buffer_handle_t`… 2.5 Low