Google Pixel Devices Out-of-Bounds Read Vulnerability in Modem Component Allowing Information Disclosure

A vulnerability exists in the modem component of Google Pixel devices, specifically within the 'closeChannel' function of 'secureelementimpl.cpp'. This issue arises from an improper bounds check, leading to a potential out-of-bounds read. Exploitation of this vulnerability could result in local information disclosure, with no additional execution privileges required. User interaction is also not necessary for exploitation.

Impact

Exploitation of this vulnerability could lead to unauthorized local information disclosure.

Remediation

Users can update their devices to the March 2025 security patch level to address this vulnerability.