cve record

CVE-2025-54957

CVSS—

Severitynone

Weakness—

ExploitedNot in CISA KEV

Description

References

← Back to the CVE Tracker

Our coverage of CVE-2025-54957

CVE-2025-54957May 13, 2026critical

A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens

Researchers have developed a two-exploit chain that can achieve root access on the Google Pixel 10, starting from a zero-click attack vector. This chain builds upon previous work that demonstrated a similar exploit for the Pixel 9.

CVE-2025-54957Jan 14, 2026critical

A 0-click exploit chain for the Pixel 9 Part 3: Where do we go from here?

The Android ecosystem faces significant challenges in mitigating zero-click exploit chains, particularly concerning audio processing components and device drivers, according to recent research. While specific vulnerabilities in the Dolby UDC (Universal Decode Component) and a BigWave driver were identified and exploited, the broader implications highlight systemic issues in attack surface…

CVE-2025-49415Jan 14, 2026high

A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby

Google's Pixel 9 devices are susceptible to a zero-click exploit chain that targets the Dolby Unified Decoder (UDC), a component responsible for processing Dolby Digital and Dolby Digital Plus audio formats. This vulnerability allows for arbitrary code execution within the mediacodec context of the device, forming the first stage of a more complex attack. The exploit chain was developed by…