CVE-2024-47022: High severity Google Android vulnerability
Published Oct 1, 2024
·Updated
Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-331255656.
Affected Software
33 affected componentsFixes available
All of the following
Google Android<2024-10-05
Any of the following
Google Pixel
Google Pixel 2
Google Pixel 2 Xl
Google Pixel 3
Google Pixel 3 Xl
Google Pixel 3a
Google Pixel 3a Xl
Google Pixel 4
Google Pixel 4 Xl
Google Pixel 4a
Google Pixel 4a 5g
Google Pixel 5
Google Pixel 5a
Google Pixel 6
Google Pixel 6 Pro
Google Pixel 6a
Google Pixel 7
Google Pixel 7 Pro
Google Pixel 7a
Google Pixel 8
Google Pixel 8 Pro
Google Pixel 8a
Google Pixel 9
Google Pixel 9 Pro
Google Pixel 9 Pro Fold
Google Pixel C
Google Pixel Fold
Google Pixel Pro Xl
Google Pixel Slate
Google Pixel Tablet
Google Pixel Xl
android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2024-10-05
Pixel-family specific:2024-10-05
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in Pixel-family specific:2024-10-05
Event History
Oct 1, 2024
Advisory Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software
Oct 25, 2024
CVE Published
via MITRE·10:34 AM
Data Sourced
via MITRE·10:34 AM
DescriptionWeakness
Frequently Asked Questions
1
What devices are affected by CVE-2024-47022?
CVE-2024-47022 affects Android devices prior to 2024-10-05 on Google Pixel devices.
2
What is the impact of CVE-2024-47022?
CVE-2024-47022 allows information disclosure within the ACPM component.
3
How do I fix CVE-2024-47022?
To fix CVE-2024-47022, update your Google Pixel device to the latest version of Android released after 2024-10-05.
4
What is the severity of CVE-2024-47022?
The severity of CVE-2024-47022 is classified by Google based on the potential for information disclosure.
5
What should I do if I can't update my device for CVE-2024-47022?
If you can't update your device for CVE-2024-47022, consider using additional security measures to protect your data.