In a three-part series, Google Project Zero details a complete 0-click exploit chain against the Pixel 9. The chain starts with media decoding that requires no user interaction, eventually leading to code execution. The researchers say that Android's growing reliance on AI-powered analysis of messages and media is expanding the attack surface for these attacks.
The technical posts focus on two main stages. First, an exploit against the Dolby Unified Decoder yields remote code execution in the mediacodec context. Next, the researchers examine which Linux kernel drivers are accessible from that context and find one that lets them break out of the sandbox. The posts are consistent on the mechanics of the chain.
The final post steps back from the specific bugs, arguing that the broader problem is structural. Even with recommendations to raise the cost of exploit development, the experience exposed wider issues in Android's media processing, SELinux contexts, and kernel attack surface. All three posts agree on the need for defense-in-depth; they differ mainly in scope, with the last one focusing on systemic lessons rather than individual vulnerabilities.