Google has released Android 17 QPR1, an update that closes a modem security hole in Pixel smartphones. BornCity reports the flaw was a zero-click issue, meaning it could be triggered without any action from the device owner. Google has warned that the vulnerability was under active attack, according to Golem.de.
The patch arrives alongside the September 2026 Pixel Drop, which Google detailed on its own blog. That release brings new Pixel VIP features and additional functions for Pixel Watch, per blog.google. Coverage from PC-WELT and heise online also describes the drop as a substantial update for Pixel phones and watches.
The modem flaw is the most serious item in the package. Because it required no user interaction, it posed a risk to affected devices even when owners did nothing unusual. Google's warning that the bug was already being exploited, as reported by Golem.de, raises the urgency of installing the update.
