Skip to content
Threat Feed

Product

Wave677DV

1 brief RSS
critical advisory

Pixel 10 Zero-Click Exploit Chain via Dolby and VPU Driver Vulnerabilities

A zero-click exploit chain was developed for the Google Pixel 10, achieving root access on Android by exploiting a patched Dolby vulnerability (CVE-2025-54957) and a memory mapping vulnerability in the Chips&Media Wave677DV video processing unit (VPU) driver.

Pixel 10 +2 android zero-click privilege-escalation kernel-exploit
3r 1t 1c