CVE-2025-36912: Android Cellular Modem Denial of Service Vulnerability
Summary
CVE-2025-36912: In cellular modem, there is a possible denial of service due to a logic error in the code. Affects :unknown: versions >= Pixel-family specific:0, < Pixel-family specific:2025-12-05. Fixed in Pixel-family specific:2025-12-05. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Android operating system is a widely used mobile platform that powers a variety of devices, including smartphones and tablets. It incorporates a cellular modem that facilitates communication over mobile networks. This modem is critical for enabling voice calls, text messaging, and data services. However, it has been identified that a logic error in the modem's code can lead to a denial of service, impacting the device's connectivity and functionality.
Vulnerability Detail
In the cellular modem of Android devices, a logic error has been discovered that can be exploited to cause a denial of service (DoS). This vulnerability allows an attacker to remotely disrupt the modem's operations without requiring any additional execution privileges or user interaction. The implications of this vulnerability are significant, as it can render the device unable to connect to mobile networks, affecting all communication services.
How To Fix
Minimum fixed version
Pixel-family specific:2025-12-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds available to mitigate this vulnerability until the patch is applied. Users are advised to keep their devices updated to minimize risks.
Conclusion
The CVE-2025-36912 vulnerability poses a significant risk to Android devices by potentially allowing remote denial of service through a logic error in the cellular modem. Users are encouraged to update their devices promptly to the patched version to ensure their security and functionality.
See every vulnerability recorded for :unknown: →
FAQ
CVE-2025-36912 is a vulnerability in the Android cellular modem that can lead to a denial of service due to a logic error in the code.
An attacker can exploit this vulnerability remotely, causing the device to lose connectivity without needing user interaction or special privileges.
The vulnerability affects specific Pixel-family devices running the Android operating system.
Yes, a patch is available as of December 5, 2025. Users should update their devices to the latest software version to mitigate the risk.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
References
Related vulnerabilities
Recent vulnerabilities recorded for :unknown:.
