Google Pixel Devices VPU Driver Elevation of Privilege Vulnerability

A vulnerability allowing arbitrary address memory mapping has been identified in the VPU driver of Google Pixel devices. This issue arises from a missing bounds check in the vpu_mmap function of vpu_ioctl, which could lead to local elevation of privilege. Notably, no additional execution privileges are required for exploitation, and user interaction is not needed.

Impact

Exploitation of this vulnerability could result in unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users can update their devices to the February 2026 security patch level to address this vulnerability.