CVE-2025-36918

A security vulnerability exists in the AoC component of Google Pixel devices, specifically within the aoc_ipc_core.c file. Due to improper input validation in the aoc_service_read_message function, an out-of-bounds read can occur. This flaw could allow for a local escalation of privilege (EoP) wi...