Race Condition Vulnerability in Android Pixel Products by Google

CVE-2025-36916

What is CVE-2025-36916?

A race condition vulnerability exists in the PrepareWorkloadBuffers function of gxp_main_actor.cc within the Android operating system. This issue can lead to a double fetch scenario, allowing an attacker to escalate privileges locally. No additional execution privileges are required, and user interaction is not necessary for exploitation, making it a significant security concern for users of affected Google Pixel devices.

References