Android Pixel Devices GetTachyon Command Out-of-Bounds Write Vulnerability Allowing Local Privilege Escalation

A vulnerability has been identified in the GetTachyonCommand function within the tachyon_server_common.h file. This issue arises from an integer overflow, leading to a potential out-of-bounds write. Exploitation of this vulnerability could result in local privilege escalation, with no additional execution privileges required. User interaction is also not necessary for exploitation.

Impact

Exploitation of this vulnerability could lead to unauthorized elevation of privileges, allowing a user to gain elevated rights or access within the system.

Remediation

Users can update their devices to the December 2025 security patch level to address this vulnerability.