Link: https://grapheneos.org/releases#2025121700

Tags:

• 2025121700 (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Pixel 8, Pixel 8 Pro, Pixel 8a, Pixel 9, Pixel 9 Pro, Pixel 9 Pro XL, Pixel 9 Pro Fold, Pixel 9a, Pixel 10, Pixel 10 Pro, Pixel 10 Pro XL, Pixel 10 Pro Fold, emulator, generic, other targets)

Changes since the 2025121200 release:

• add workaround for upstream system_server WallpaperManagerService.hasPermission() crash
• fix upstream system_server crash in NotificationHistory.getPooledStringsToWrite()
• Launcher: add a workaround for upstream QuickstepModelDelegate.getContainer() crash
• set initial port security state at an earlier boot stage to improve debugging on production builds where the port state has been changed from the default "Charging-only when locked" to "Charging-only when locked, except before first unlock" or "On"
• use default desktop mode configuration since our changes are no longer needed to enable features and caused crashes for at least 1 user which were addressed with an out-of-band release prior to this one
• kernel (6.1): update to latest GKI LTS branch revision
• kernel (6.1): add back recent dma-buf changes now that an upstream use-after-free bug is resolved
• kernel (6.6): update to latest GKI LTS branch revision including update to 6.6.118
• adevtool: update carrier settings
• Vanadium: update to version 143.0.7499.146.0

All of the Android 16 security patches from the current January 2026, February 2026, March 2026, April 2026, May 2026 and June 2026 Android Security Bulletins are included in the 2025121701 security preview release. List of additional fixed CVEs:

• High: CVE-2025-32348, CVE-2025-48641, CVE-2026-0014, CVE-2026-0015, CVE-2026-0016, CVE-2026-0017, CVE-2026-0018

2025121701 provides at least the full 2026-01-01 Android and Pixel security patch level but will remain marked as providing 2025-12-05.

For detailed information on security preview releases, see our post about it.