EdgeTPU Firmware CVE-2026-0150

Exploitation requires local access to the device and the ability to invoke the EdgeTPU firmware's ExecuteGraph command handler - i.e., a process that can reach the EdgeTPU device interface on an affected Google Pixel/Tensor device. No user interaction is required (UI:N). The condition that limits exploitation is attacker-privilege level, which is unresolved in the sources: the CVSS vector asserts PR:L (low-privileged local caller), while the description states 'root privileges needed,' which would make this a low-value primitive requiring pre-existing root. Further limiting factors: the vector is local only (not remotely reachable), it is non-automatable per SSVC, and it affects only devices carrying EdgeTPU firmware (Pixel/Tensor), not the broader Android ecosystem. The precise integer-overflow trigger within ExecuteGraph beyond 'crafted input causing an out-of-bounds write' is not described in the available sources.

This is a locally-exploitable memory-corruption flaw (CWE-787 out-of-bounds write via integer overflow) in the EdgeTPU firmware's ExecuteGraph command handler on Google Pixel/Tensor devices. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, 7.8) and SSVC 'Technical Impact: total' agree that successful exploitation yields complete compromise of the targeted component, but every exposure signal points away from widespread, urgent risk: SSVC Exploitation is 'none', SSVC Automatable is 'no' (consistent with a local-only vector that cannot be sprayed remotely), EPSS is 0.07% (0th percentile), and the vulnerability is NOT in CISA KEV. The vuln.today priority is 'this_week' - meaning patch within the normal cycle, not an emergency. CONFLICTING DATA: the description states 'local escalation of privilege with root privileges needed,' which reads as requiring root already (PR:H) - directly at odds with the official CVSS PR:L and with the premise of a privilege-escalation bug; this ambiguity should be resolved against the Android/Pixel bulletin before assigning an attacker-privilege assumption. Net: a genuinely severe local EoP primitive but a low-probability, non-automatable, hardware-specific issue - a real but non-urgent priority, not a high-CVSS-but-low-impact case nor an actively-exploited emergency.

A malicious or compromised app/process already running on a Pixel device with access to the EdgeTPU device interface submits a crafted graph to the ExecuteGraph command handler, triggering an integer overflow that produces an out-of-bounds write in EdgeTPU firmware. The attacker leverages the memory corruption to escalate privileges locally without any user interaction. No public exploit or proof-of-concept is identified in the available sources.