Google Pixel Elevation of Privilege Vulnerability in Modem Component

A heap buffer overflow vulnerability has been identified in the NrmmDecoder::DecodeSORTransparentContext function within cn_NrmmDecoder.cpp. This flaw allows for a possible out-of-bounds write, which could lead to remote (proximal/adjacent) elevation of privilege. Exploitation of this vulnerability does not require any additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized elevation of privilege, allowing a user to gain increased rights or access within the system.

Remediation

Users can update their devices to the December 2025 security patch level to address this vulnerability.