Executive brief
The Video Processing Unit (VPU) component in Google Pixel devices contains a use-after-free vulnerability in the vpu_ioctl.c file that allows unprivileged attackers to escalate privileges without user interaction. An attacker can exploit this memory safety flaw to gain elevated system access, potentially compromising device security and user data.
Technical details
A use-after-free vulnerability exists in multiple functions of the vpu_ioctl.c file in Google's Android Video Processing Unit driver. The vulnerability allows remote elevation of privilege without requiring additional execution privileges or user interaction. The flaw is reachable via local network access or direct device access to invoke the vulnerable ioctl functions, enabling an attacker to trigger the use-after-free condition and execute arbitrary code with elevated privileges. Google has addressed this issue in the August 2026 security patch (2026-08-05) for Pixel devices.
Affected products
- Google Android Pixel devices with patch level prior to 2026-08-05
Timeline
- 2026-08-04: disclosed
- 2026-08-05: patched