A three-part Pixel 9 zero-click exploit chain

Project Zero published a complete chain from media codec RCE to kernel privilege escalation on a current Android flagship

3-part series on a 0-click exploit chain targeting Pixel 9, from RCE in mediacodec to kernel LPE. Part 1: https:// projectzero.google/2026/01/pixel- 0-click-part-1.html … Part 2: https:// projectzero.google/2026/01/pixel- 0-click-part-2.