Pixel_GPU_Exploit

Mali GPU Kernel LPE This article provides an in-depth analysis of two kernel vulnerabilities within the Mali GPU, reachable from the default application sandbox, which I independently identified and reported to Google. It includes a kernel exploit that achieves arbitrary kernel r/w capabilities...

CVE-2023-6241-Pixel7_Adaptation

CVE-2023-6241 for Google Pixel 7 This repository will illustrate how to adapt the exploit published by securitylab in its GitHub repository working for Google Pixel 8 for a Google Pixel 7. Before starting the modification of the exploit, the assumption that the original exploit was also working f...

CVE-2022-46395

Exploit for CVE-2022-46395 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in November 2022. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...

CVE-2023-6241

Exploit for CVE-2023-6241 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in November 2023. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...

cve-2019-2215

CVE-2019-2215 Temproot para Pixel 2 y Pixel 2 XL mediante CVE-2019-2215 Basado en una prueba de concepto de Jann Horn y Maddie Stone de Google Project Zero Resumen Demostración de un ataque de escalada de privilegios de solo lectura/escritura en memoria del kernel que resulta en un shell root...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-58704 Google Pixel Improper Authorization Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significa...

Google Pixel owners urged to patch actively exploited modem flaw

Google has released its September 2026 Pixel Update Bulletin, fixing 110 vulnerabilities, including one that it says "may be under limited, targeted exploitation.” The bug is not described as a simple remote takeover, but as a vulnerability that could give an attacker who already has a foothold o...

Google Pixel Improper Authorization Vulnerability

Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges...

VulnCheck KEV: CVE-2026-58704

Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges...

📄 Google Pixel 10 Codec3P VPU fw_debug_buf Use-After-Free / Privilege Escalation

C proof of concept and vulnerability write-up for CVE-2026-0125 affecting the Google Pixel 10 Codec3P VPU driver. The issue is a race condition involving the fwdebugbuf pointer in the VPU kernel driver. The issue was fixed in the June 2026 Pixel Security Bulletin. Issue description There are...

Google Pixel remote code execution vulnerability (CNVD-2026-25584)

The Google Pixel is an Android smart device produced by Google, used for mobile communication and application execution. The Google Pixel has a remote code execution vulnerability. This vulnerability arises due to memory corruption in the Modem component during the processing of SIP REFER request...

Google Pixel remote code execution vulnerability (CNVD-2026-25583)

The Google Pixel is a Android smart device produced by Google, used for mobile communication and application execution. The Google Pixel has a remote code execution vulnerability. This vulnerability arises due to a lack of boundary checks in the modem component, allowing unauthorized writing beyo...

Google Pixel CPIF Driver Out-Of-Bounds Read / Write

The CPIF driver on Google Pixel has issues in linkreadgnssimage and linkloadgnssimage that lead to kernel out-of-bounds read and write from userland...

Google Pixel security vulnerabilities

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from incorrect boundary checks in the mfcdecv4l2.c file’s mfcdecdqbuf function. This improper boundary checking allows for out-of-bounds writes, potentially leading to an increase i...

Google Pixel security vulnerabilities

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from out-of-bounds writes due to the lack of bounds checks. This vulnerability may lead to an increase in local privileges...

Google Pixel security vulnerabilities

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from a race condition that leads to the reuse of a read operation after deallocation, potentially resulting in the disclosure of local information...

Google Pixel security vulnerabilities

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from incorrect bounds checking, leading to out-of-bounds write-ups and potentially allowing for remote code execution...

Google Pixel security vulnerabilities

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from the lack of boundary checks in the EfwApTransport::ProcessRxRing function, leading to out-of-bound writing and potentially allowing for local privilege escalation...

Google Pixel security vulnerabilities

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from memory corruption that leads to out-of-bound writes, potentially allowing for remote code execution...

Google Pixel security vulnerabilities

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from incorrect bounds checking, leading to out-of-bounds write-ups and potentially allowing for remote code execution...