Google Android Pixel Devices VPN Bypass Vulnerability Allowing Privilege Escalation

A vulnerability exists in Google Android Pixel devices that allows apps to be added to bypass VPN restrictions, due to an undeclared permission. This could lead to a local escalation of privileges, with no additional execution privileges required. Exploitation does not require user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized privileges being granted to an application, potentially allowing it to perform actions or access resources that are normally restricted.

Remediation

Users can update their devices to the December 2024 security patch level to address this vulnerability.