Executive brief
Google Pixel devices contain a privilege escalation vulnerability in the Trusted Execution Environment (TEE), a secure processor that handles sensitive operations like biometric authentication and payment processing. An attacker with local access can exploit an integer overflow to bypass permission checks and gain elevated privileges without requiring user interaction or additional system privileges, potentially compromising the security of sensitive data and functions.
Technical details
The vulnerability is an integer overflow leading to permission bypass in multiple locations within the Pixel Trusted Execution Environment. The flaw allows local escalation of privilege without requiring additional execution privileges or user interaction. The attack vector is local, making it exploitable by applications or processes running on the device. Google has patched this vulnerability and included it in the September 2026 security patch level (2026-09-05 or later) for all supported Pixel devices. The vulnerability is tracked as CVE-2026-0194 with a CVSS score of 8.4.
Affected products
- Google Pixel Before 2026-09-05 security patch level
Timeline
- 2026-09-15: disclosed
- 2026-09-05: patched: Included in September 2026 security patch level