CVE-2025-32334
mediumpriority · track · 0DEUS中文Shown in its original language — a full translation is planned for a future version.
Google Pixel是美国谷歌（Google）公司的一款智能手机。 Google Pixel存在安全漏洞，该漏洞源于设备的蓝牙 (Bluetooth) 组件中，可能导致权限提升。
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
No weakness (CWE) mapping recorded.
affected products (1)
Products and version ranges known to be affected.
advisories (2)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2025-1291Pixel Patchday Juni 2025: Mehrere SchwachstellenDeutsch2025-06-10csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android für Pixel Geräte ausnutzen, um beliebigen Programmcode auszuführen oder Informationen offenzulegen.
- PUB-A-3947261092025-06-01vendor · osvUS
Analysis: Access Vector: Local Layer: Userland Root Causes: Heap Buffer Overflow SRS Categories: - Android Security SRS Category: Memory Safety Writeup: A stack trace alone with PoC app is insufficient to determine if this represents a genuine memory corruption vulnerability reachable by an untrusted application. However, adhering to security principle we always assume the worst-case scenario. Bluetooth team, if you believe this does not constitute a valid security issue, please provide your reasoning, and we will adjust the rating accordingly.
also known as (2)
Other names and identifiers for this entity.
- CNNVD-202506-3813cnnvd
- A-394726109osv
sources
Which sources assert this record, and when.
references (2) cnnvd
External citations — patches, advisories, analysis.
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan