TLDR InfoSec · ATTACKS & VULNERABILITIES
VULNERABILITY IN DOLBY DECODER CAN ALLOW ZERO-CLICK ATTACKS
Summary from the TLDR InfoSec newsletter
Researchers from Google's Project Zero discovered a vulnerability in Dolby's Unified Decoder that could lead to remote code execution. Dolby Decoder is used by Android to locally decode all audio messages and attachments. The vulnerability is caused by a buffer overflow.