Google Pixel Devices lwis Component Elevation of Privilege Vulnerability

A vulnerability allowing local elevation of privilege has been identified in the lwis component of Google Pixel devices. This issue arises from an out-of-bounds write caused by an integer overflow, which could be exploited to gain system execution privileges. The vulnerability does not require user interaction for exploitation.

Impact

Exploitation of this vulnerability could lead to unauthorized access to elevated privileges, allowing a user to execute actions or commands with system-level rights.

Remediation

Users can update their devices to the September 2025 security patch level to address this vulnerability.