Volerion logoVolerion
Volerion logoVolerion

Google Pixel Devices Remote Code Execution Vulnerability in Cellular Modem Component

Vulnerability

A remote code execution vulnerability has been identified in the cellular modem component of Google Pixel devices. This issue arises from an out-of-bounds write in the file 'cd_CnMsgCodecUserApi.cpp', caused by a missing bounds check. The vulnerability can be exploited without any additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected device.

Remediation

Users can update their devices to the September 2025 security patch level to address this vulnerability.

Added: Sep 4, 2025, 11:00 AM
Updated: Sep 4, 2025, 6:21 PM

Vulnerability Rating

Custom Algorithm
spread
7.8
impact
7.5
exploitability
4.7
remediation
7.7
relevance
0.5
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.