Google Pixel Devices WLAN Elevation of Privilege Vulnerability

A vulnerability allowing local elevation of privilege has been identified in the WLAN component of Google Pixel devices. This issue arises from an out-of-bounds write in the function wl_cfgscan_update_v3_schedscan_results(), located in wl_cfgscan.c, due to improper bounds checking. Exploitation of this vulnerability does not require additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users can update their devices to the June 2025 security patch level to address this vulnerability.