CVE-2025-36928: Android Package Vulnerability in gxp_buffer.h Leading to Local Escalation of Privilege
Summary
CVE-2025-36928: In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to an incorrect bounds check. Affects :unknown: versions >= Pixel-family specific:0, < Pixel-family specific:2025-12-05. Fixed in Pixel-family specific:2025-12-05. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The vulnerability affects a component within the Android ecosystem, specifically in the gxp_buffer.h file. This component is responsible for handling network address resolution and buffer management. The vulnerability arises from an incorrect bounds check, which can lead to potential out-of-bounds writes. This issue is particularly concerning as it allows for local escalation of privileges without requiring additional execution rights, making it a significant security risk for users of affected Pixel devices.
Vulnerability Detail
In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to an incorrect bounds check. This vulnerability can lead to local escalation of privilege, allowing an attacker to gain higher access levels on the device. The flaw is rooted in the way the bounds are checked during the address resolution process, which can be exploited without user interaction, increasing the risk of exploitation.
How To Fix
Minimum fixed version
Pixel-family specific:2025-12-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds have been provided for this vulnerability. The best course of action is to apply the available patch as soon as it becomes available.
Conclusion
CVE-2025-36928 represents a critical vulnerability in the Android ecosystem that can lead to local escalation of privileges. Users are strongly advised to update their devices to the latest patched version to protect against potential exploitation. Utilizing tools like Vulert can further enhance security by providing real-time monitoring for vulnerabilities.
See every vulnerability recorded for :unknown: →
FAQ
CVE-2025-36928 is a vulnerability in the Android ecosystem that allows for local escalation of privilege due to an out-of-bounds write in gxp_buffer.h.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor vulnerabilities without requiring any signup.
If your device is vulnerable, you should update to the patched version released on December 5, 2025, to mitigate the risk.
No, user interaction is not needed for exploitation, making this vulnerability particularly dangerous.
Vulert is a monitoring tool that uses the gradle.lockfile to alert users in real-time about open-source vulnerabilities in their software. It provides a simple way to check for vulnerabilities without needing access to the code.
References
Related vulnerabilities
Recent vulnerabilities recorded for :unknown:.
