Introduction🔒 SSL Verified

Table of Contents

• ↓ Updating the Dolby Exploit
• ↓ A Question of Accessibility
• ↓ The Vulnerability: A Quick Recap
• ↓ Audio Attack Surface
• ↓ Preface
• ↓ Introduction
• ↓ Top Alternatives to projectzero.google

6-Month Traffic Trend Estimate

Visual representation extracted from projectzero.google

Content Snippets from projectzero.google

"We recently published an exploit chain for the Google Pixel 9 that demonstrated it was possible to go from a zero-click context to root on Android in just two exploits. The Dolby 0-click vulnerability existed across all of Android, until it was patched in January 2026. While we had an exploit chain for the Pixel 9, we wanted to see if it was possible to write a similar exploit chain for Pixel 10."

"Altering our exploit for CVE-2025-54957 was fairly straightforward. The majority of needed changes involved updating offsets calculated for the specific version of the library we targeted on the Pixel 9 to similar offsets in the library for Pixel 10. The only challenge (outside of wishing we’d better documented which syncframes contained offsets) was that the Pixel 10 uses RET PAC in the place of -fstack-protector, which meant that __stack_chk_fail wasn’t available to be overwritten by code. After a bit of trial and error, we used dap_cpdp_init, initialization code that can be overwritten without causing functional problems, as it is called once when the decoder is initialized and never again."

"Mutational grammar fuzzing is a fuzzing technique in which the fuzzer uses a predefined grammar that describes the structure of the samples. When a sample gets mutated, the mutations happen in such a way that any resulting samples still adhere to the grammar rules, thus the structure of the samples gets maintained by the mutation process. In case of coverage-guided grammar fuzzing, if the resulting sample (after the mutation) triggers previously unseen code coverage, this sample is saved to the sample corpus and used as a basis for future mutations."

"This technique has proven capable of finding complex issues and I have used it successfully in the past, including to find issues in XSLT implementations in web browsers and even JIT engine bugs."

Key Topics & Focus Areas for projectzero.google:

Updating the Dolby Exploit

A Question of Accessibility

The Vulnerability: A Quick Recap

Audio Attack Surface

Preface

Introduction