Critical Dolby Codec Vulnerability Exposes Android Devices to Code Execution Attacks

Cybersecuritynews •Guru Baran • January 6, 2026

Google has issued its January 2026 Android Security Bulletin, urging users to update to the 2026-01-05 patch level or later to mitigate a critical vulnerability in Dolby components. The standout issue, CVE-2025-54957, targets the Dolby Digital Plus (DD+) codec and could enable out-of-bounds memory writes on affected Android devices. At the heart of this flaw […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Dolby Vulnerability in Android Patched by Google Google has patched a critical vulnerability in the Android implementation of Dolby, tracked as CVE-2025-54957. The flaw was discovered by Google researchers in October 2025 and involves a leak in the DD+ Codec that could lead to data leaks. 5 sources 45

Extracted Entities

Critical Dolby Codec Vulnerability Exposes Android Devices to Code Execution Attacks

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

Platforms (1)