--- title: A 0-click exploit chain for the Pixel 9 Part 1: Decoding... description: Google Project Zero details a sophisticated 0-click exploit chain targeting the Pixel 9 through a vulnerability (CVE-2025-54957) in the Dolby Unified Decoder.... canonical: https://daily.dev/posts/a-0-click-exploit-chain-for-the-pixel-9-part-1-decoding-dolby-nrcxllz0p twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby | daily.dev og:description: Google Project Zero details a sophisticated 0-click exploit chain targeting the Pixel 9 through a vulnerability (CVE-2025-54957) in the Dolby Unified Decoder.... og:url: https://daily.dev/posts/a-0-click-exploit-chain-for-the-pixel-9-part-1-decoding-dolby-nrcxllz0p og:image: https://api.daily.dev/og/posts/nrcXLLz0p.png og:image:alt: A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby **[Project Zero](https://daily.dev/sources/projectzero)** · 54 min read · 0 upvotes · 0 comments ## Summary Google Project Zero details a sophisticated 0-click exploit chain targeting the Pixel 9 through a vulnerability (CVE-2025-54957) in the Dolby Unified Decoder. The exploit leverages an integer overflow in EMDF payload processing to achieve arbitrary code execution in the mediacodec context. The attack chain involves manipulating heap allocations, bypassing ASLR through probabilistic techniques, and using ROP gadgets to ultimately write shellcode via /proc/self/mem. The vulnerability affects most Android devices and was triggered automatically when audio attachments are received via SMS/RCS for AI-powered transcription features. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [A 0-click exploit chain for the Pixel 9 Part 3: Where do we go from here?](https://daily.dev/posts/a-0-click-exploit-chain-for-the-pixel-9-part-3-where-do-we-go-from-here--qjrdywt1p) · Project Zero · 0 upvotes · 0 comments - [A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens](https://daily.dev/posts/a-0-click-exploit-chain-for-the-pixel-10-when-a-door-closes-a-window-opens-crecn1dw3) · Project Zero · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#android](https://daily.dev/tags/android), [#reverse-engineering](https://daily.dev/tags/reverse-engineering) [View this post on daily.dev](https://daily.dev/posts/a-0-click-exploit-chain-for-the-pixel-9-part-1-decoding-dolby-nrcxllz0p) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby","url":"https://daily.dev/posts/a-0-click-exploit-chain-for-the-pixel-9-part-1-decoding-dolby-nrcxllz0p","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/a-0-click-exploit-chain-for-the-pixel-9-part-1-decoding-dolby-nrcxllz0p"},"datePublished":"2026-01-15T17:23:18.234Z","dateModified":"2026-08-24T06:58:25.951Z","description":"Google Project Zero details a sophisticated 0-click exploit chain targeting the Pixel 9 through a vulnerability (CVE-2025-54957) in the Dolby Unified Decoder....","image":"https://media.daily.dev/image/upload/s--1KxV4ohY--/f_auto/v1722860400/public/Placeholder%2007","thumbnailUrl":"https://media.daily.dev/image/upload/s--1KxV4ohY--/f_auto/v1722860400/public/Placeholder%2007","isAccessibleForFree":true,"articleSection":"Project Zero","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Project Zero","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/36643542e8f34b1cbc6adb6494f91925","url":"https://daily.dev/sources/projectzero"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/a-0-click-exploit-chain-for-the-pixel-9-part-1-decoding-dolby-nrcxllz0p","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,android,reverse-engineering","timeRequired":"PT54M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Project Zero","item":"https://daily.dev/sources/projectzero"},{"@type":"ListItem","position":3,"name":"A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby"}]} ```