Hardening cellular basebands in Android

Google describes a defense-in-depth strategy for hardening cellular baseband firmware by enabling Clang UBSan sanitizers—Integer Overflow (IntSan) and Bounds (BoundSan)—in bare‑metal code, with guidance on diagnostics vs trapping modes, staged deployment (detect/fix, measure/optimize, pre‑production soak), targeted application to high-risk parsers and protocol stacks, managing performance overhead, leveraging modern toolchains, selectively disabling 2G where feasible, and progressively adopting memory-safe Rust to further reduce vulnerability classes.