A 0-click exploit chain for the Pixel 9 Part 2: Cracking the Sandbox with a Big Wave

A researcher audited the Pixel BigWave AV1 hardware driver accessible from the constrained mediacodec SELinux context and found three bugs; the most serious is a use-after-free that enables a 2144-byte arbitrary kernel write, combined with a KASLR bypass and type-confusion of VFS handlers to create a reliable arbitrary read/write and local privilege escalation to root. The exploit was adapted into a small shellcode payload that could be delivered via a Dolby Unified Decoder RCE, and vendor fixes were issued on 2026-01-05.