Google Pixel Modem Information Disclosure Vulnerability

A vulnerability allowing out-of-bounds read in the modem component of Google Pixel devices has been identified. This issue arises from an incorrect bounds check in the function sms_DisplayHexDumpOfPrivacyBuffer within sms_Utilities.c. The flaw could lead to remote information disclosure without requiring additional execution privileges or user interaction for exploitation.

Impact

Exploitation of this vulnerability could result in unauthorized remote access to sensitive information.

Remediation

Users can update their devices to the December 2024 security patch level to address this vulnerability.