Junglewise Threat Intelligence

CVE-2024-29748: Android Pixel Privilege Escalation Vulnerability

CVE-2024-29748 · Severity: critical · CVSS 7.8 · Exploited in the wild · Published 2024-04-04

Technologies: Android Pixel. Vendors: Android, Google.

Executive brief

A logic error in Android Pixel firmware allows for a local escalation of privilege by bypassing security measures. Specifically, an attacker can interrupt a factory reset triggered by a device admin app, potentially allowing unauthorized access to data or persistent control.

Affected products

  • Google Android Pixel prior to 2024-04-05 patch level

Timeline

  • 2024-04-01: patched: Vendor advisory published by Google.
  • 2024-04-04: kev added: Added to CISA Known Exploited Vulnerabilities Catalog.
  • 2024-04-05: disclosed: NVD Published Date.
  • 2024-04-05: exploited: Reported as exploited in the wild.

Related threats