ChipsGoogle Project Zero6 months ago
Pixel 9 Sandbox Escape via BigWave Driver
13 min read
Three bugs in the Pixel 9's BigWave AV1 decoder driver allowed sandbox escape and kernel arbitrary read/write. One bug remained unfixed for over a year despite a two-line fix. Fixes for all three bugs were released on January 5, 2026.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyGoogle
