---
id: "CVE-2024-32896"
kind: "vulnerability"
aliases: ["CVE-2024-32896"]
title: "google android: there is a possible way to bypass due to a logic error in the code"
severity: "high"
cvss: 8.1
epss: null
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Android Pixel", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "google android", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["android", "exploited", "infrastructure", "mobile-fleet", "pixel"]
not_affected_if: ["unknown"]
published_at: "2024-06-13T00:00:00+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T22:29:05+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-32896", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-32896", "first_seen_at": "2026-10-23T22:29:05+00:00"}]
---

# google android: there is a possible way to bypass due to a logic error in the code

An unspecified flaw in Android Pixel firmware allows privilege escalation. An attacker who already has some access to the device can gain higher privileges than they should have.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Android Pixel affected ? fixed ?
- vendor:google android affected ? fixed ?

## Fix

Apply the Android Pixel security update or mitigation per vendor instructions; CISA says to discontinue use if mitigations are unavailable.

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-32896
- 2026-10-23T22:29:05+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2024-32896

## From the sources

Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation.

CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_