CVE-2025-36899

HIGH

Google Android Test/Debugging Code - Privilege Escalation

Title source: llm
STIX 2.1

Description

There is a possible escalation of privilege due to test/debugging code left in a production build. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Scores

CVSS v3 8.4
EPSS 0.0001
EPSS Percentile 0.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-489
Status published
Products (1)
google/android
Published Sep 04, 2025
Tracked Since Feb 18, 2026