CVE-2025-36910
In hw_oem_imei_init of hw_oem_imei.c, there is a possible escalation of privilege due to hardware identifiers not being fused to OTP. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
What each source reports
OSVPUB-A-377489833No score
In hw_oem_imei_init of hw_oem_imei.c, there is a possible escalation of privilege due to hardware identifiers not being fused to OTP. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Record
PUB-A-377489833- Updated
- 2026-11-10
Affected packages
| Package | Affected | Fixed |
|---|---|---|
:unknown:Android | Pixel-family specific:0 up to Pixel-family specific:2025-09-05, plus listed versions Pixel-family specific | Pixel-family specific:2025-09-05 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-36910 is a vulnerability with no CVSS score yet in :unknown:, published September 1, 2025. No source lists public exploit code. Fixed in :unknown: Pixel-family specific:2025-09-05.