Skip to content
COOEY

FAIL › dossier

Pixel

PRODUCT

· dossier confidence 50%

Google's Pixel smartphone line suffers from a recurring pattern of high-severity firmware and hardware vulnerabilities that are actively exploited in the wild, including privilege escalation, factory reset bypasses, and data leakage during flashing. These systemic weaknesses in the Android implementation on Pixel devices present a critical risk to defense supply chains relying on unpatched or compromised hardware.

Failure events
6
Zero-days
0
RCEs
0
On KEV
6
Critical
0
Worst shame
78
PROFILE
CategoryConsumer ElectronicsWhat they doPixel is a line of smartphones manufactured by Google, running the Android operating system.
SECURITY POSTURE

Google's Pixel devices have a documented history of high-severity privilege escalation and information disclosure vulnerabilities actively exploited in the wild, indicating systemic weaknesses in firmware and hardware security that pose significant risks to defense supply chains.

Notable failures
  • CVE-2021-39793: Local privilege escalation actively exploited
  • CVE-2024-32896: Firmware privilege escalation actively exploited
  • CVE-2024-29748: Factory reset bypass via privilege escalation
  • CVE-2024-29745: Fastboot firmware data leakage
  • CVE-2023-21237: UI-based information disclosure
Patterns: Repeated unpatched privilege escalation vulnerabilities; Active exploitation of hardware/firmware flaws in the wild; Information disclosure via misleading UI and firmware leaks
FAILURE HISTORY · 6
DATEEVENTSEVSUMMARY
2022-04-11 CVE-2021-39793 high A local privilege escalation vulnerability in Google Pixel devices was actively exploited in the wild, highlighting the risks of unpatched hardware in defense supply chains.
2026-09-16 CVE-2026-58704 high A logic error in Google Pixel cellular modems allows privilege escalation by bypassing authorization checks.
2024-06-13 CVE-2024-32896 high Android Pixel firmware contains a privilege escalation vulnerability actively exploited in the wild.
2024-04-04 CVE-2024-29748 high Android Pixel devices allow attackers to bypass factory reset via a privilege escalation vulnerability.
2024-04-04 CVE-2024-29745 high Android Pixel fastboot firmware leaks sensitive data during device unlocking and flashing, enabling unauthorized access to device secrets.
2024-03-05 CVE-2023-21237 high Android Pixel devices are vulnerable to information disclosure via misleading UI that hides foreground service notifications.
Open questions: Are there any recent patches mitigating the active exploitation of CVE-2024-32896 and CVE-2024-29748? · What is Google's current patch cycle for Pixel firmware updates?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-14 04:52:26.061094+00:00