Android Pixel Devices KVM Hyp NVHE Out-of-Bounds Write Vulnerability Leading to Privilege Escalation

A vulnerability has been identified in the KVM hypervisor component for ARM64 architecture, specifically in the memory allocation file of the NVHE (Non-Vectorized Hypervisor Extension) implementation. The issue arises from inadequate input validation, allowing for a potential out-of-bounds write. This vulnerability could be exploited to escalate privileges locally, without requiring any additional execution rights or user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation, allowing a user to gain elevated rights or access within the system.