A 0-click exploit chain for the Pixel 9 Part 3: Where do we go from here?
PoC publicPixel 9Android media stack (Dolby UDC / BigWave driver) Read at Google Project Zero
Below is the opening; the full story is at Google Project Zero.
From Google Project Zero
While our previous two blog posts provided technical recommendations for increasing the effort required by attackers to develop 0-click exploit chains, our experience finding, reporting and exploiting these vulnerabilities highlighted some broader issues in the Android ecosystem. This post describes the problems we encountered and recommendations for improvement.…
Worried this affects your company?
Discuss a security assessment of your internet-facing systems. Scope agreed before testing.