CVE-2024-29748
Published on April 5, 2024
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Known Exploited Vulnerability
This Android Pixel Privilege Escalation Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. Android Pixel contains a privilege escalation vulnerability that allows an attacker to interrupt a factory reset triggered by a device admin app.
The following remediation steps are recommended / required by April 25, 2024: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Vulnerability Analysis
CVE-2024-29748 is exploitable with local system access, requires user interaction. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.
Products Associated with CVE-2024-29748
You can be notified by stack.watch whenever vulnerabilities like CVE-2024-29748 are published in these products:
What versions are vulnerable to CVE-2024-29748?
Each of the following must match for the vulnerability to exist.