Executive brief
Google Pixel devices contain a buffer overflow vulnerability in the audio processing component used for IP-based multimedia messaging (IMS). An attacker can trigger this flaw by sending a specially crafted audio file that causes the system to write data beyond allocated memory boundaries, potentially enabling remote code execution. User interaction is required, such as opening or playing a malicious audio file.
Technical details
The vulnerability is an out-of-bounds write in the decodeAmr function of ImsMediaAudioPlayer.cpp, caused by a missing bounds check when processing AMR-encoded audio data. The flaw allows an attacker to overflow a buffer and achieve remote code execution with no privilege escalation required. The attack vector is network-based and requires user interaction (e.g., user must open or play the malicious audio file). Patches are available in the Android security patch level 2026-09-05 or later for Google Pixel devices.
Affected products
- Google Pixel prior to 2026-09-05 patch level
Timeline
- 2026-09-15: disclosed
- 2026-09-05: patched