U-Boot Privilege Escalation Vulnerability in Pixel Tablet Dock

Vulnerability

A vulnerability in the U-Boot bootloader's `append_uint32_le()` function allows for fault injection, creating a logic error that could lead to unauthorized privilege escalation. This issue does not require any execution privileges or user interaction to exploit.

Impact

Exploitation of this vulnerability could result in unauthorized elevation of privileges on the affected device.

Remediation

Users can update their devices to the December 2025 security patch level to address this vulnerability.

Added: Dec 11, 2025, 8:18 PM
Updated: Dec 11, 2025, 10:46 PM

Vulnerability Rating

Custom Algorithm
spread
6.6
impact
2.5
exploitability
3.3
remediation
0.0
relevance
1.4
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.