Google Pixel Devices Audio Decoder Out-of-Bounds Write Vulnerability Leading to Remote Code Execution

A vulnerability has been identified in the audio decoder component of Google Pixel devices. The issue arises from an incorrect bounds check in the AudioDecoder::HandleProduceRequest function, which creates a potential for out-of-bounds write. This vulnerability could be exploited to execute remote code without requiring additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could result in remote code execution on the affected device.

Remediation

Users can update their devices to the December 2025 security patch level to address this vulnerability.