Information Leak in gxp_fence_manager.cc of Affected Android Products
CVE-2025-36929

5.5MEDIUM

Key Information:

Vendor

Google
Status
Android
Vendor
CVE Published:
11 December 2025

What is CVE-2025-36929?

A potential information leak has been identified in the gxp_fence_manager.cc module, where improper input validation may result in local information disclosure. This vulnerability does not require any additional privileges for exploitation and can occur without user interaction. It highlights a critical issue in how data is managed and validated within certain Android products, underscoring the need for robust security measures in software development.

Affected Version(s)

Android Android kernel

References

https://source.android.com/security/bulletin/pixel/2025-1...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-36929 : Information Leak in gxp_fence_manager.cc of Affected Android Products