Google and Dolby: Android’s January 2026 Update Patches Critical Dolby Audio Decoder Vulnerability

Google Patches Critical Dolby Audio Decoder Flaw in January 2026 Android Update

Google’s January 2026 Android security update addressed a severe vulnerability in Dolby audio decoders, tracked as CVE-2025-54957, which posed risks to millions of devices. Discovered by Google researchers in October 2025, the flaw allowed malicious audio files to execute remote code, access private data, or trigger system crashes.

The fix was first deployed to Google Pixel devices in December 2025, providing immediate protection for Pixel users. The broader rollout arrived with the January 2026 Android security update, extending coverage to a wider range of Android devices. This patch strengthens defenses against exploit attempts via compromised audio files, reinforcing Android’s security posture and underscoring the importance of timely updates in mitigating emerging threats.

Source: https://dailysecurityreview.com/cyber-security/endpoint-security/androids-january-2026-update-patches-critical-dolby-audio-decoder-vulnerability/

Google cybersecurity rating report: https://www.rankiteo.com/company/google

Dolby Laboratories cybersecurity rating report: https://www.rankiteo.com/company/dolbylaboratories

"id": "GOODOL1767776529",
"linkid": "google, dolbylaboratories",
"type": "Vulnerability",
"date": "1/2026",
"severity": "25",
"impact": "1",
"explanation": "Attack without any consequences"

{'affected_entities': [{'customers_affected': 'Millions of Pixel users',
                        'industry': 'Technology',
                        'location': 'Global',
                        'name': 'Google Pixel',
                        'size': 'Millions of users',
                        'type': 'Smartphone'},
                       {'customers_affected': 'Millions of Android users',
                        'industry': 'Technology',
                        'location': 'Global',
                        'name': 'Android Device Manufacturers',
                        'size': 'Millions of users',
                        'type': 'Various hardware combinations'}],
 'attack_vector': 'Malicious audio files',
 'customer_advisories': 'Users should update their devices to the latest '
                        'Android security patch to mitigate risks from '
                        'CVE-2025-54957.',
 'data_breach': {'file_types_exposed': 'Audio files',
                 'sensitivity_of_data': 'High (potential unauthorized access)',
                 'type_of_data_compromised': 'Private data'},
 'date_detected': '2025-10-01',
 'date_publicly_disclosed': '2025-12-01',
 'date_resolved': '2026-01-01',
 'description': 'Google’s January 2026 Android security update addressed a '
                'critical flaw (CVE-2025-54957) in Dolby audio decoders, which '
                'posed potential threats to millions of Android devices. The '
                'vulnerability allowed remote code execution, unauthorized '
                'data access, and system crashes via maliciously crafted audio '
                'files.',
 'impact': {'data_compromised': 'Potential unauthorized access to private data',
            'downtime': 'Potential system crashes',
            'operational_impact': 'Degraded device performance',
            'systems_affected': 'Android devices with Dolby audio decoders'},
 'investigation_status': 'Resolved',
 'lessons_learned': 'Timely security updates are critical in mitigating '
                    'emerging vulnerabilities, especially in multimedia '
                    'components. Broader rollouts ensure wider protection '
                    'across diverse hardware combinations.',
 'post_incident_analysis': {'corrective_actions': 'Patch development and '
                                                  'deployment via Android '
                                                  'security updates.',
                            'root_causes': 'Vulnerability in Dolby audio '
                                           'decoder processing of maliciously '
                                           'crafted audio files.'},
 'recommendations': 'Users should prioritize installing security updates '
                    'promptly. Device manufacturers should collaborate with '
                    'Google to ensure rapid patch deployment.',
 'references': [{'date_accessed': '2026-01-01',
                 'source': 'Google Security Update'}],
 'response': {'communication_strategy': 'Public disclosure via security update '
                                        'notes',
              'containment_measures': 'Over-the-air software update for Pixel '
                                      'devices (December 2025)',
              'incident_response_plan_activated': 'Yes',
              'remediation_measures': 'Patch integrated into January 2026 '
                                      'Android security update'},
 'stakeholder_advisories': 'Device manufacturers and users advised to apply '
                           'the January 2026 Android security update.',
 'title': 'Critical Dolby Audio Decoder Flaw in Android (CVE-2025-54957)',
 'type': 'Vulnerability Exploitation',
 'vulnerability_exploited': 'CVE-2025-54957'}