PT-2024-2945 · Google · Android Pixel

Published

2024-04-02

·

Updated

2025-07-05

·

CVE-2024-29745

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Android Pixel versions (affected versions not specified)
Description The issue is related to an Information Disclosure vulnerability due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not required for exploitation. The vulnerability is associated with the bootloader of Android Pixel phones and can be exploited in fastboot mode, allowing an attacker to potentially unlock a device and dump memory.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

Related Identifiers

BDU:2024-03112
CVE-2024-29745

Affected Products

Android Pixel