Google Pixel Devices Information Disclosure Vulnerability in TPU Component

Vulnerability

A vulnerability allowing information disclosure has been identified in Google Pixel devices. This issue arises from improper input validation in the TPU component, specifically within the AreFencesRegistered function of the gxp_fence_manager.cc file. The vulnerability could lead to local information leakage without requiring additional execution privileges or user interaction for exploitation.

Impact

Exploitation of this vulnerability could result in unauthorized local information disclosure.

Remediation

Users can update their devices to the December 2025 security patch level to address this vulnerability.

Added: Dec 11, 2025, 8:23 PM
Updated: Dec 11, 2025, 10:48 PM

Vulnerability Rating

Custom Algorithm
spread
7.8
impact
0.6
exploitability
3.3
remediation
7.7
relevance
1.4
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.