Google fixed an actively exploited zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-29748+1 related CVE | Local Privilege Escalation in Google Pixel (Android), Exploited in the Wild | 7.8 group max | <1% | KEV | KEV |
CVE-2024-32892+4 related CVEs | In handle_init of goodix/main/main.c, there is a possible memory corruption due to type confusion | 7.8 group max | <1% | ||
| CVE-2024-32896 | Local Privilege Escalation in Google Android Pixel Kernel | 7.8 | 3% | KEV | KEV |
From the original article
1 min read at securityaffairs.comGoogle is warning of a security vulnerability impacting its Pixel Firmware that has been actively exploited in the wild as a zero-day. Google warned of an elevation of privilege vulnerability, tracked as CVE-2024-32896, in the Pixel Firmware, which has been exploited in the wild as a zero-day. “There are indications that CVE-2024-32896 may be under limited, targeted exploitation.”
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.