Google Pixel Devices LDFW Component Information Disclosure Vulnerability

A logic error in the ppcfw_deny_sec_dram_access function of ppcfw.c creates a potential for arbitrary reading from Trusted Execution Environment (TEE) memory. This vulnerability could lead to local information disclosure, requiring system execution privileges for exploitation. User interaction is not necessary.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information stored in TEE memory.

Remediation

Users can update their devices to the March 2025 security patch level to address this vulnerability.