Google forced to update Pixel smartphones due to critical vulnerability

Company Google has released an emergency security update for Pixel series smartphones after discovering a critical zero-click vulnerability. The issue allows attackers to gain full control over the device without any user interaction.

The US Cybersecurity and Infrastructure Security Agency (CISA) has assigned the incident a high priority. Federal agencies are required to install patches within 3 days, highlighting the seriousness of the threat to confidential data.

The vulnerability exploits a chain of errors in media data processing, allowing for remote code execution. Unlike standard attacks, this does not require clicking on malicious links or opening attachments, making it extremely difficult for the smartphone owner to detect the intrusion.

Technical details of the exploit are being discussed in the Hacker News community, where experts emphasize the need for immediate firmware updates to the latest version. Users are advised to check for updates in system settings and reboot the device to complete the installation of security patches.

This incident has become another reminder of the risks associated with vulnerabilities in the basic components of mobile operating systems. Timely installation of updates remains the only way to protect against such attacks using automated vectors of penetration into the device's memory.