Cracking the Pixel 8: Exploiting the Undocumented DSP to Bypass MTE

How an undocumented DSP attack surface on the Pixel 8 becomes a path to bypassing Memory Tagging Extension.