Pixel Modem Flaw Allowed Silent Access for Nearby Attackers

Google has released a security update for its Pixel smartphones to address a critical flaw in the cellular modem. The company warned that this specific bug, identified as CVE-2026-58704, may already be under limited and targeted exploitation. This means that sophisticated attackers might already be using it to infiltrate devices without the owner’s knowledge or consent.

The patch is part of a broader September update that resolves a total of 110 vulnerabilities across the Pixel ecosystem. Because the flaw operates at the modem level, it bypasses many of the standard security layers that protect Android apps, making it particularly dangerous for users who have not yet installed the update.

Zero-click attacks require no user action

The danger of this vulnerability lies in its ability to function without any user interaction. Unlike typical malware that requires a user to click a suspicious link or open a malicious file, this flaw allows a nearby attacker to escalate their privileges on the device simply by being in proximity. The logic error in the modem code permits a permission bypass, granting the attacker higher access rights without needing to install malicious software or trick the user into executing code.

For the average user, this translates to a significant privacy risk. If exploited, an attacker could potentially monitor communications, access data, or track location without the phone ever displaying a warning or asking for permission. The fact that it is a zero-click vulnerability means that simply having the phone on and connected to a cellular network is enough for the intrusion to occur.

Spyware vendors likely target such flaws

While Google has not named specific attackers or victims, security analysts note that the nature of the bug matches patterns seen in previous commercial spyware attacks. These tools are often sold to governments and law enforcement agencies, though they can also end up in the hands of other malicious actors. The cautious wording in Google’s advisory suggests they are aware of active, targeted use rather than widespread, random exploitation.

Modem vulnerabilities are particularly attractive to attackers because they operate below the standard Android app security model. By targeting the component that handles cellular connections, attackers can reach privileged system areas without needing to compromise individual apps. This makes the modem a high-value target for state-backed hackers and advanced threat actors seeking persistent access.

Update required for all supported devices

All supported Pixel devices are expected to receive the September 5, 2026, patch level, which includes the fix for this critical issue. Google strongly urges users to install this update as soon as it becomes available on their devices. The update is part of the broader Android security bulletin and addresses numerous other high-severity vulnerabilities as well.

According to reporting by GN technics/mobile (en-US), the company’s spokesperson did not respond to requests for further comment on the specific attackers involved. However, the urgency of the patch highlights the ongoing challenge of securing the lower-level hardware components of modern smartphones. Users should check their device settings for the latest update to ensure they are protected against this and other potential threats.