Google Pixel Elevation of Privilege Vulnerability in AOC Component

A vulnerability allowing for elevation of privilege has been identified in the AOC component of Google Pixel devices. This issue arises from a possible out-of-bounds write in the WAVES_send_data_to_dsp function within libaoc_waves.c, due to a missing bounds check. Exploitation of this vulnerability could lead to unauthorized access to elevated privileges, without the need for additional execution rights or user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized elevation of privileges, allowing a user to gain access to restricted functions or data.

Remediation

Users can update their devices to the December 2025 security patch level to address this vulnerability.