Researchers have discovered that the pre-installed "Showcase.apk" app on Google Pixel devices could be exploited due to excessive system privileges. This flaw may allow attackers to remotely execute code and install malicious packages.
https://securityaffairs.com/167130/secu ... e-app.html