Bringing Rust to the Pixel Baseband
2026-04-22T13:23:51Z•9c5f873a17b3313341dfa363b79608f8bc14fc30be55e336219ca4b4a24713f3
androidandroid-17basebandcertificate-transparencychromecookie-theftdbscdevice-bound-session-credentialsdns-parserindirect-prompt-injectioninfostealersllm-securitylummaC2memory-safetymerkle-tree-certificatesmodempost-quantum-cryptographypqcprompt-injectionquantum-safe-httpsremote-code-executionrustscam-protectionvulnerability-rewardsworkspace
What happened
Collection of Google security updates (Apr 2026): Pixel team integrated a memory-safe Rust DNS parser into Pixel 10 modem firmware to reduce memory-safety vulnerabilities in the baseband (motivated by prior remote‑RCE research), improving attack surface resilience in a high-impact component. Chrome is rolling out Device Bound Session Credentials (DBSC) to make exfiltrated cookies unusable and mitigate session‑theft by infostealers. Google Workspace is improving defenses against indirect prompt injection (IPI) against LLMs (e.g., Gemini). The Vulnerability Rewards Program published a 2025 year‑
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- google_security_blog
- Record identifier
- 9c5f873a17b3313341dfa363b79608f8bc14fc30be55e336219ca4b4a24713f3
- Enrichment time
- 2026-04-22T13:23:51Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.