CVE-2026-0187

CVE-2026-0187 is a Critical elevation-of-privilege vulnerability in the GSA (Google Silicon Accelerator) subcomponent of Google Pixel devices, located in the gsa_sw_pk_hash_compare function of image-auth-srv.c. The root cause is a logic error that allows a local attacker with System execution pri...