Sandboxing?
Sandboxing?
Posted Jan 16, 2026 22:31 UTC (Fri) by josh (subscriber, #17465)Parent article: A 0-click exploit chain for the Pixel 9 (Project Zero)
It genuinely astonishes me that this wasn't running in a sandbox. Any kind of image/audio/video decoder in a context exposed directly to random untrusted content should be running in a sandbox that has zero access to anything other than the codec data. Not just SELinux like everything else; it should be running in a strict seccomp sandbox. As far as I can tell from reading part 1 of the series, this wasn't.
The LWN site is currently under high scraper load, so comment display has been suppressed for anonymous users. If you are a human, you may read the comments by clicking the button below:
Note: you can avoid this step in the future by logging into your LWN account.