Google Pixel Devices Elevation of Privilege Vulnerability in the LWIS Component

A vulnerability allowing local elevation of privilege has been identified in the LWIS component of Google Pixel devices. This issue arises from an out-of-bounds write caused by an incorrect bounds check, which could be exploited to gain elevated privileges. Exploitation of this vulnerability requires system execution privileges, but does not involve user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users can update their devices to the September 2025 security patch level to address this vulnerability. Instructions for checking and updating the security patch level are available on the Google device update schedule page.