Dangling pointers, fragile memory, Pixel 9 Pro privilege escalation

horde

https://dawnslab.jd.com/Pixel_9_Pro_EoP/

https://xcancel.com/hzshang15/status/1997929647900893309#m

Here is a detailed bug analysis for MALI GPU CVE-2025-XXXX(6349|8045). We implements a stable privilege escalation on the latest version of the Pixel 9, and leverage a double-free primitive to arbitrary physical memory RW without any info leak.