Google Pixel Devices Privilege Escalation Vulnerability in LWIS Component

A vulnerability allowing local privilege escalation has been identified in the LWIS component of Google Pixel devices. This issue arises from an out-of-bounds write caused by an integer overflow, which could be exploited to gain elevated privileges without requiring additional execution rights or user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users can update their devices to the December 2024 security patch level to address this vulnerability.