{"id":"CVE-2024-32896","kind":"vulnerability","aliases":["CVE-2024-32896"],"related":[],"title":"google android: there is a possible way to bypass due to a logic error in the code","description":"Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation.\n\nCISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","summary":"An unspecified flaw in Android Pixel firmware allows privilege escalation. An attacker who already has some access to the device can gain higher privileges than they should have.","severity":"high","cvss":8.1,"epss":null,"exploited":true,"exploited_at":"2024-06-13T00:00:00+00:00","products":[{"name":"Android Pixel","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"google android","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["android","exploited","infrastructure","mobile-fleet","pixel"],"not_affected_if":["unknown"],"how_to_check":null,"fix":"Apply the Android Pixel security update or mitigation per vendor instructions; CISA says to discontinue use if mitigations are unavailable.","status":"open","published_at":"2024-06-13T00:00:00+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T20:58:40+00:00","updated_at":"2026-10-23T22:29:05+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T20:58:40Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Android Pixel security update or mitigation per vendor instructions; CISA says to discontinue use if mitigations are unavailable.","reach":"local","impact":"high","summary":"An unspecified flaw in Android Pixel firmware allows privilege escalation. An attacker who already has some access to the device can gain higher privileges than they should have.","category":"infrastructure","who_cares":["android","pixel","mobile-fleet"],"confidence":0.6,"needs_auth":"yes","worst_case":"Attacker with local foothold gains elevated system privileges on the device","analyst_note":"Find the Android Pixel security bulletin for this CVE to get affected and fixed builds and confirm the auth requirement; check the CISA KEV entry for the due date.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000448,"input_tokens":2787,"output_tokens":338,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2024':19A,22A '-32896':20A,23A 'access':51B 'action':75C 'allow':42B,69C 'alreadi':48B 'android':2A,24A,27A,28B,39B,59C 'appli':76C 'attack':46B 'bypass':9A 'cisa':73C 'code':17A 'contain':61C 'cve':18A,21A 'devic':54B 'discontinu':82C 'due':10A 'error':14A 'escal':44B,72C 'exploit':29B 'firmwar':41B,67C 'flaw':37B 'fleet':33B 'gain':56B 'googl':1A 'google':26A 'higher':57B 'infrastructur':30B 'instruct':80C 'logic':13A 'mitig':77C,88C 'mobil':32B 'mobile-fleet':31B 'per':78C 'pixel':25A,34B,40B,60C 'possibl':6A 'privileg':43B,58B,71C 'product':86C 'requir':74C 'unavail':90C 'unspecifi':36B,63C 'use':83C 'vendor':79C 'vulner':64C 'way':7A","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2024-06-13T00:00:00+00:00","kev":{"dateAdded":"2024-06-13","dueDate":"2024-07-04","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2024-32896","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-32896","severity":null,"published_at":"2024-06-13T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T11:39:15+00:00","note":null},{"source":"nvd","external_id":"CVE-2024-32896","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-32896","severity":null,"published_at":"2024-06-13T21:15:54+00:00","modified_at":"2026-06-17T07:30:38+00:00","first_seen_at":"2026-10-23T22:29:05+00:00","fetched_at":"2026-10-23T22:29:05+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}