Executive brief
A vulnerability in Google Pixel device firmware allows local attackers with system-level privileges to read sensitive information that should be protected. The flaw exists in input validation logic within a core system component (mbu_class.rs). Although exploitation requires elevated system access, successful attacks could expose confidential data such as encryption keys or authentication credentials.
Technical details
This vulnerability is an information disclosure flaw caused by improper input validation in the validate_ns_buf function within mbu_class.rs, a Pixel device firmware component. The root cause appears to be insufficient bounds checking or validation of namespace buffer inputs, allowing an attacker with System execution privileges to bypass security controls and read memory regions containing sensitive data. The attack vector is local, and System-level privileges are a prerequisite for exploitation; no user interaction is required. An attacker could leverage this to extract confidential information from kernel or system memory. A patch addressing this issue was included in the Pixel security update effective 2026-09-05.
Affected products
- Google Pixel Pre-2026-09-05
Timeline
- 2026-09-15: disclosed: Published in Pixel Update Bulletin
- 2026-09-05: patched: Fix included in security patch level 2026-09-05