CVE-2025-36911
Quick assessment
Affected
Google Android
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Google Android是美国谷歌（Google）公司的一套以Linux为基础的开源操作系统。 Google Android存在安全漏洞，该漏洞源于基于密钥配对逻辑错误，可能导致远程信息泄露。
In-the-Wild Activity Observed
github_trending · high
Possible ATT&CK Techniques 1 AI
T1213 · Data from Information Repositories
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-36911
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
In key-based pairing, there is a possible ID due to a logic error in the code. This could lead to remote (proximal/adjacent) information disclosure of user's conversations and location with no additional execution privileges needed. User interaction is not needed for exploitation.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Google Android 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Google Android是美国谷歌（Google）公司的一套以Linux为基础的开源操作系统。 Google Android存在安全漏洞，该漏洞源于基于密钥配对逻辑错误，可能导致远程信息泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2025-36911
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Hijacking Bluetooth Accessories Using Google Fast Pair: WhisperPair CVE-2025-36911 Reference Implementation & Vulnerability Verification Toolkit | https://github.com/SpectrixDev/DIY_WhisperPair | POC Details |
| 2 | This script can be used to check if a Bluetooth device is vulnerable to CVE-2025-36911. | https://github.com/Cedric-Martz/CVE-2025-36911_scan | POC Details |
| 3 | WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This vulnerability affects millions of Bluetooth audio devices worldwide, allowing unauthorized pairing and potential microphone access without user consent. | https://github.com/zalexdev/wpair-app | POC Details |
| 4 | This is not an exploit for CVE-2025-36911!!! This is a detector for finding potentially vulnerable devices! Only use on your own devices! I am not responsible for damages! | https://github.com/SteamPunk424/CVE-2025-36911-Wisper_Pair_Target_Finder- | POC Details |
| 5 | This is not an exploit for CVE-2025-36911!!! This is a detector for finding potentially vulnerable devices! Only use on your own devices! I am not responsible for damages! | https://github.com/SteamPunk424/CVE-2025-36911-Wisper_Pair_Target_Finder | POC Details |
| 6 | WhisperPair (CVE-2025-36911) POC for ESP32 device | https://github.com/PivotChip/FrostedFastPair | POC Details |
| 7 | A Vulnerablity Scanner for Whisper Pair (CVE-2025-36911) | https://github.com/ap425q/whisper-pair | POC Details |
| 8 | A security research tool that identifies and demonstrates the CVE-2025-36911: Fast Pair Pairing Mode Bypass vulnerability | https://github.com/aalex954/whisperpair-poc-tool | POC Details |
| 9 | Exploit of the CVE-2025-36911 vulnerability in Python for testing our own equipment | https://github.com/PentHertz/CVE-2025-36911-exploit | POC Details |
| 10 | 🔍 Scan and research CVE-2025-36911 vulnerabilities with WPair, a specialized tool for Android built in Kotlin, ensuring your applications remain secure. | https://github.com/fa1sa1142/wpair-app | POC Details |
| 11 | 🛡️ Scan for CVE-2025-36911 vulnerabilities with WPair, a research tool designed for Android developers using Kotlin. Secure your applications effectively. | https://github.com/fa1sa1142/fa1sa1142.github.io | POC Details |
| 12 | BLUE-SPY (Bluetooth Low Energy Universal Exploit - Security Penetration Testing) is a professional security assessment tool for analyzing CVE-2025-36911 vulnerabilities in Google's Fast Pair protocol implementation. | https://github.com/Athexhacker/BLUE-SPY | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-36911
请登录查看更多情报信息。
IV. Related Vulnerabilities
V. Comments for CVE-2025-36911
No comments yet