CVE-2024-29748: Android Pixel Privilege Escalation Vulnerability
Android Pixel contains a privilege escalation vulnerability that allows an attacker to interrupt a factory reset triggered by a device admin app.
Other sources
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Discontinue use of the product if mitigations are unavailable.
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-29748?
The severity of CVE-2024-29748 is classified as high due to its potential for local privilege escalation.
How do I fix CVE-2024-29748?
To fix CVE-2024-29748, update your Android Pixel device to the latest firmware provided by Google.
What is the impact of CVE-2024-29748?
CVE-2024-29748 allows an attacker to exploit a logic error to interrupt a factory reset, potentially gaining unauthorized access.
Which devices are affected by CVE-2024-29748?
CVE-2024-29748 affects Android Pixel devices running vulnerable versions of the operating system up to April 5, 2024.
Is CVE-2024-29748 being actively exploited?
Yes, CVE-2024-29748 has been reported as actively exploited, increasing the urgency for users to apply security updates.