CVE CVE

CVE-2024-32896

CISA Known Exploited Vulnerability (KEV)

Android Pixel Privilege Escalation Vulnerability

June 13, 2024

July 4, 2024

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Description

there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Weakness Enumeration

CWE-ID CWE Name

CWE-670
Always-Incorrect Control Flow Implementation

CWE-783
Operator Precedence Logic Error

Known Affected Software Configurations


cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

Details

Source:
NVD
Published:
Updated:

Risk information

CVSS v3

Base score:
7.8
Severity:

HIGH

Vector:
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2

Not defined