CVE-2024-32896
Android Pixel Privilege Escalation Vulnerability
Published Jun 13, 2024 · updated Jun 17, 2026 · google android
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Timeline
Detection, updates, and resolution for this record.
Jun 13, 2024 · Catalog
Detected
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Jun 13, 2024 · CISA KEV
Known exploited
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Jul 4, 2024 · CISA KEV
Remediation due
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Jun 17, 2026 · Catalog
Updated
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA due date Jul 4, 2024
Affected
- cpe google/androidversion unspecified
- vendor Android Pixelversion unspecified
Sources
- CISA KEVCVE-2024-32896
Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation.
cisa.gov - CVE.orgCVE-2024-32896
Official CVE identifier
cve.org - FIRST EPSSCVE-2024-32896
30-day exploitation probability 3.0%
first.org - NIST NVDCVE-2024-32896
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
nvd.nist.gov