Third-party cyber evaluations involving OpenAI models
openai.com·14h ago
Security
Google Project Zero·8 min read
A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby
TL;DR
Mobile phones now automatically decode audio attachments in messages without user interaction to enable AI features like transcription, expanding attack surface for 0-click exploits (attacks requiring no user action). Google Messages decodes incoming SMS and RCS audio attachments automatically before users open messages.
✦ Why It Matters
Engineers must audit automatic media processing pipelines for security vulnerabilities before deployment in messaging applications.
Key Takeaways
- Investigate and patch vulnerabilities in audio decoders.
- Implement stricter bounds checking in media processing code.
- Educate users about potential risks of 0-click attacks.
- Regularly update mobile devices to mitigate security threats.
How It Works
The exploit leverages a flaw in the Dolby Unified Decoder's handling of EMDF payloads, allowing for controlled memory allocation and buffer overruns. By manipulating the payload size, attackers can execute arbitrary code within the media codec context.