Junglewise Threat Intelligence

CVE-2024-32896: Android Pixel Privilege Escalation Vulnerability

CVE-2024-32896 · Severity: critical · CVSS 7.8 · Exploited in the wild · Published 2024-06-13

Technologies: Android Pixel. Vendors: Android, Google.

Executive brief

A logic error in Android Pixel firmware allows for local escalation of privilege. Exploitation requires user interaction but no additional execution privileges, potentially allowing an attacker to bypass security controls.

Affected products

  • Google Pixel Android firmware versions prior to 2024-06-01 update

Timeline

  • 2024-06-13: disclosed
  • 2024-06-13: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
  • 2024-06-01: patched: Addressed in the June 2024 Pixel Update Bulletin
  • 2024-06-13: exploited: Reported as exploited in the wild per CISA KEV entry.

Related threats