Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-36911
Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
In key-based pairing, there is a possible ID due to a logic error in the code. This could lead to remote (proximal/adjacent) information disclosure of user's conversations and location with no additional execution privileges needed. User interaction is not needed for exploitation.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Google Android 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Google Android是美国谷歌(Google)公司的一套以Linux为基础的开源操作系统。 Google Android存在安全漏洞,该漏洞源于基于密钥配对逻辑错误,可能导致远程信息泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
GoogleAndroid Android kernel -
II. Public POCs for CVE-2025-36911
#POC DescriptionSource LinkShenlong Link
1Hijacking Bluetooth Accessories Using Google Fast Pair: WhisperPair CVE-2025-36911 Reference Implementation & Vulnerability Verification Toolkithttps://github.com/SpectrixDev/DIY_WhisperPairPOC Details
2This script can be used to check if a Bluetooth device is vulnerable to CVE-2025-36911.https://github.com/Cedric-Martz/CVE-2025-36911_scanPOC Details
3WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This vulnerability affects millions of Bluetooth audio devices worldwide, allowing unauthorized pairing and potential microphone access without user consent.https://github.com/zalexdev/wpair-appPOC Details
4This is not an exploit for CVE-2025-36911!!! This is a detector for finding potentially vulnerable devices! Only use on your own devices! I am not responsible for damages!https://github.com/SteamPunk424/CVE-2025-36911-Wisper_Pair_Target_Finder-POC Details
5This is not an exploit for CVE-2025-36911!!! This is a detector for finding potentially vulnerable devices! Only use on your own devices! I am not responsible for damages!https://github.com/SteamPunk424/CVE-2025-36911-Wisper_Pair_Target_FinderPOC Details
6WhisperPair (CVE-2025-36911) POC for ESP32 device https://github.com/PivotChip/FrostedFastPairPOC Details
7A Vulnerablity Scanner for Whisper Pair (CVE-2025-36911)https://github.com/ap425q/whisper-pairPOC Details
8A security research tool that identifies and demonstrates the CVE-2025-36911: Fast Pair Pairing Mode Bypass vulnerabilityhttps://github.com/aalex954/whisperpair-poc-toolPOC Details
9Exploit of the CVE-2025-36911 vulnerability in Python for testing our own equipmenthttps://github.com/PentHertz/CVE-2025-36911-exploitPOC Details
10🔍 Scan and research CVE-2025-36911 vulnerabilities with WPair, a specialized tool for Android built in Kotlin, ensuring your applications remain secure.https://github.com/fa1sa1142/wpair-appPOC Details
11🛡️ Scan for CVE-2025-36911 vulnerabilities with WPair, a research tool designed for Android developers using Kotlin. Secure your applications effectively.https://github.com/fa1sa1142/fa1sa1142.github.ioPOC Details
12BLUE-SPY (Bluetooth Low Energy Universal Exploit - Security Penetration Testing) is a professional security assessment tool for analyzing CVE-2025-36911 vulnerabilities in Google's Fast Pair protocol implementation.https://github.com/Athexhacker/BLUE-SPYPOC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2025-36911
Please Login to view more intelligence information
IV. Related Vulnerabilities
V. Comments for CVE-2025-36911

No comments yet


Leave a comment