TLDR InfoSec · ATTACKS & VULNERABILITIES

VULNERABILITY IN DOLBY DECODER CAN ALLOW ZERO-CLICK ATTACKS

securityweek.com2 min read

Summary from the TLDR InfoSec newsletter

Researchers from Google's Project Zero discovered a vulnerability in Dolby's Unified Decoder that could lead to remote code execution. Dolby Decoder is used by Android to locally decode all audio messages and attachments. The vulnerability is caused by a buffer overflow.