Google Pixel Devices Tracepoint IPC Memory Overwrite Vulnerability Allowing Local Privilege Escalation

A vulnerability has been identified in the tracepoint message handler of the CPM component within the Google Pixel devices. This issue arises from improper input validation, leading to a potential memory overwrite. Exploitation of this vulnerability could allow for local escalation of privileges, with no additional execution privileges required. User interaction is not necessary for exploitation.

Impact

Exploitation of this vulnerability could result in unauthorized elevation of privileges, allowing a user to gain access to restricted functions or data.

Remediation

Users can update their devices to the December 2025 security patch level to address this vulnerability.