Google releases January Android Security Bulletin, but Pixel users are still waiting for bug fixes
Google has freshly released the Android Security Bulletin for January 2026, listing a critical vulnerability that will be addressed in security updates. The list isn’t quite as long as the December 2025 bulletin , and that is because Google recently moved to publicly disclose a large chunk of security issues in Android on a quarterly basis rather than every month . In fact, the only critical vulnerability listed in the bulletin relates to the Dolby Digital Plus Codec , which is used for playing audio files on Android.
As per Wiz , the vulnerability can allow hackers to manipulate the extra information, also known as evolution data, added to the audio file, which can force the player to crash on a broad range of devices. On Android specifically, it can be used to execute a zero-click attack when you open or receive the specific file via a messenger app.
Don’t want to miss the best from Android Authority ?
While Google has patched the code in Android’s source code, manufacturers may take a while to implement it with separate security updates meant for their devices . Dolby acknowledged in October that “there is a possible increased risk of vulnerability if this bug is used alongside other known Pixel vulnerabilities.”
While the exploit was listed in the Android Security Bulletin for January, Google had already patched it with the December security update for Pixel devices. Perhaps that is why a separate security update for Pixel devices hasn’t been released in January 2026.
Despite that, there are plenty more bugs affecting Pixel phones, including one that randomly makes the Pixel 10’s display unresponsive , and we hope Google fixed those with the January update. Google does not stick to a specific release schedule, and updates sometimes arrive later in the month — as it did on the 11th in November, so there’s still some hope it might roll out soon. But, to be honest, we can’t on the specific date.
That said, whether you’re using a Pixel or any other Android device, we recommend updating to the latest security update available.
Thank you for being part of our community. Read our Policy before posting.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
