ByteOS Network

NVD Vulnerability Details :

CVE-2024-32896

Analyzed

Source-dsap-vuln-management@google.com

View Known Exploited Vulnerability (KEV) details

Published At-13 Jun, 2024 | 21:15

Updated At-24 Oct, 2025 | 13:45

there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

CISA Catalog

Date Added	Due Date	Vulnerability Name	Required Action
2024-06-13	2024-07-04	Android Pixel Privilege Escalation Vulnerability	Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Date Added: 2024-06-13

Due Date: 2024-07-04

Vulnerability Name: Android Pixel Privilege Escalation Vulnerability

Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Secondary	3.1	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 8.1

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CPE Matches

Google LLC

>>android>>-

cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-670	Primary	nvd@nist.gov
CWE-783	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: CWE-670

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-783

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
https://source.android.com/security/bulletin/pixel/2024-06-01	dsap-vuln-management@google.com	Vendor Advisory
https://source.android.com/security/bulletin/pixel/2024-06-01	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-32896	134c704f-9b21-4f2e-91b3-4a467353bcc0	US Government Resource

Hyperlink: https://source.android.com/security/bulletin/pixel/2024-06-01

Source: dsap-vuln-management@google.com

Resource:

Vendor Advisory

Hyperlink: https://source.android.com/security/bulletin/pixel/2024-06-01

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-32896

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Resource:

US Government Resource

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History