Executive brief
A kernel memory management flaw in Google Pixel devices allows local attackers with system-level privileges to write data beyond allocated memory boundaries. This can lead to privilege escalation or system instability, affecting the security of all Pixel devices using the vulnerable kernel code.
Technical details
An out-of-bounds write vulnerability exists in multiple kernel locations due to missing bounds checks. The flaw allows an attacker with system execution privileges to write beyond buffer boundaries, potentially corrupting kernel memory structures. Attack requires local access and elevated privileges; no user interaction is needed. Exploitation can lead to privilege escalation or kernel crash. Patches are available in the 2026-09-05 security patch level for supported Pixel devices.
Affected products
- Google Pixel Pre-2026-09-05 security patch level
Timeline
- 2026-09-15: disclosed
- 2026-09-05: patched