PT-2024-4747 · Google · Android

Published

2024-06-11

·

Updated

2025-10-08

·

CVE-2024-32896

CVSS v3.1

8.1

High

VectorAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version
Description The issue is related to a logic error in the code, which could lead to local escalation of privilege with no additional execution privileges needed. User interaction is required for exploitation. The vulnerability has been exploited in the wild, with indications of limited, targeted exploitation. Google has released a security patch to address this issue.
Recommendations To resolve the issue, update your Android device to the latest security patch level. For Pixel devices, update to the June 2024 patch level or later. For other Android devices, apply the September 2024 Android security patch or later. Ensure that all company-owned Google Pixel devices are updated to the latest security patch level to patch the vulnerability.

Fix

Weakness Enumeration

CWE-783CWE-670

Related Identifiers

BDU:2024-05268
CVE-2024-32896

Affected Products

Android