---
id: 8546
title: "A 0-click exploit chain for the Pixel 9 Part 2: Cracking the Sandbox with a Big Wave"
source_domain: projectzero.google
source_url: "https://projectzero.google/2026/01/pixel-0-click-part-2.html"
published_at: "2026-01-14T00:00:00Z"
tags: ["rce", "privilege-escalation", "android", "sandbox-escape", "kernel", "exploit-chain", "driver", "pixel"]
phying_url: "https://phying.com/item/8546"
lang: en
---

# A 0-click exploit chain for the Pixel 9 Part 2: Cracking the Sandbox with a Big Wave

## Summary

Second part of Project Zero's Pixel 9 zero-click chain research: auditing the BigWave AV1 decoder driver reachable from the mediacodec sandbox and finding bugs that yield kernel read and write.

## Intelligence Metadata

- **Sources:** projectzero.google
- **Published:** 2026-01-14T00:00:00Z
- **Original:** https://projectzero.google/2026/01/pixel-0-click-part-2.html
- **Phying News:** https://phying.com/item/8546