Google Pixel Watch Elevation of Privilege Vulnerability in wl_notify_gscan_event

A vulnerability allowing local elevation of privilege has been identified in Google Pixel Watch devices. This issue arises from an out-of-bounds write in the wl_notify_gscan_event function of wl_cfgscan.c, caused by a missing bounds check. Exploitation of this vulnerability does not require additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users can update their Google Pixel Watch devices to the March 2025 security patch level to address this vulnerability.