Google Pixel Devices Exynos RIL Information Disclosure Vulnerability

A vulnerability allowing out-of-bounds read has been identified in the Exynos RIL component of Google Pixel devices. This issue arises from a missing bounds check in the GetCellInfoList() function within protocolnetadapter.cpp. Exploitation of this vulnerability could lead to local information disclosure, although it requires a compromise of the baseband firmware. Notably, no user interaction is needed for exploitation.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information, potentially leading to a compromise of the baseband firmware.

Remediation

Users can update their devices to the December 2024 security patch level to address this vulnerability.