IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
5.5Medium KEV

CVE-2024-29745Android Pixel Information Disclosure Vulnerability

Google Android; google android Published: (2 years ago)

Known exploited — Android Pixel Information Disclosure Vulnerability

CISA confirmed this vulnerability is used in real attacks on 04.04.2024. Remediation deadline for US federal agencies: 25.04.2024.

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. https://source.android.com/docs/security/bulletin/pixel/2024-04-01 ; https://nvd.nist.gov/vuln/detail/CVE-2024-29745

Description

there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Weakness (CWE): CWE-908

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Google Android Android kernel

References and patches

CPE matches (NVD) (1)
  • cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

Recent CVEs in the same product — Android

6.7Medium
CVE-2026-56952
Google Android

In platform_msg_handler_init of default_msg_handlers.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for explo…

6.8Medium
CVE-2026-56936
Google Android

In wacom_hid_set_device_mode of wacom_sys.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

7.0High
CVE-2026-56906
Google Android

In ep_free of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

9.8Critical
CVE-2026-55330
Google Android

In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

4.4Medium
CVE-2026-55307
Google Android

In kdn_set_sysregs_prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

4.4Medium
CVE-2026-0198
Google Android

In is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.