Google Patches Critical Zero-Click Vulnerability in Pixel Modems

The vulnerability resides within the device modem, the component responsible for cellular connectivity. By exploiting this flaw, an attacker can escalate privileges to escape the modem’s isolated environment and reach broader system data. Because the exploit requires no user action—such as clicking a malicious link or downloading a file—it poses a significant risk to targeted individuals.

While Google has declined to identify the specific actors behind the intrusion, such exploits are frequently associated with surveillance vendors. These companies typically develop sophisticated spyware for sale to government agencies and law enforcement, often targeting specific devices in limited campaigns. Owners of affected Pixel hardware should ensure their devices are updated to the latest software version to mitigate the risk posed by this privilege escalation flaw.