CVE-2024-47020: High severity Google Android vulnerability
Published Oct 1, 2024
·Updated
Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ABL component, A-331966488.
Affected Software
33 affected componentsFixes available
All of the following
Google Android<2024-10-05
Any of the following
Google Pixel
Google Pixel 2
Google Pixel 2 Xl
Google Pixel 3
Google Pixel 3 Xl
Google Pixel 3a
Google Pixel 3a Xl
Google Pixel 4
Google Pixel 4 Xl
Google Pixel 4a
Google Pixel 4a 5g
Google Pixel 5
Google Pixel 5a
Google Pixel 6
Google Pixel 6 Pro
Google Pixel 6a
Google Pixel 7
Google Pixel 7 Pro
Google Pixel 7a
Google Pixel 8
Google Pixel 8 Pro
Google Pixel 8a
Google Pixel 9
Google Pixel 9 Pro
Google Pixel 9 Pro Fold
Google Pixel C
Google Pixel Fold
Google Pixel Pro Xl
Google Pixel Slate
Google Pixel Tablet
Google Pixel Xl
android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2024-10-05
Pixel-family specific:2024-10-05
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in Pixel-family specific:2024-10-05
Event History
Oct 1, 2024
Advisory Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software
Oct 25, 2024
CVE Published
via MITRE·10:34 AM
Data Sourced
via MITRE·10:34 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-47020?
CVE-2024-47020 is classified as a moderate severity vulnerability due to potential information disclosure.
2
How do I fix CVE-2024-47020?
To remediate CVE-2024-47020, users should update their Google Pixel devices to the Android version released on or after 2024-10-05.
3
What devices are affected by CVE-2024-47020?
CVE-2024-47020 affects various Google Pixel devices running Android versions prior to 2024-10-05.
4
What type of vulnerability is CVE-2024-47020?
CVE-2024-47020 is an information disclosure vulnerability found in the ABL component.
5
When was CVE-2024-47020 disclosed?
CVE-2024-47020 was disclosed on or before October 5, 2024.