In multiple functions of sswrp_cpm.dtsi, there is a possible way to modify voltage control registers from non-secure software due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

In multiple functions of sswrp_cpm.dtsi, there is a possible way to modify voltage control registers from non-secure software due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Ein Angreifer kann mehrere Schwachstellen in Google Android Pixel ausnutzen, um Code auszuführen, höhere Berechtigungen zu erlangen, Informationen offenzulegen oder die Verfügbarkeit von Gerätefunktionen zu beeinträchtigen.