8.1

CVE-2024-32896

Warnung

there is a possible way to bypass  due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Google ≫ Android Version-

13.06.2024: CISA Known Exploited Vulnerabilities (KEV) Catalog

Android Pixel Privilege Escalation Vulnerability

Schwachstelle

Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation.

Beschreibung

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.09% 0.269
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0 8.1 2.2 5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-670 Always-Incorrect Control Flow Implementation

The code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated.

CWE-783 Operator Precedence Logic Error

The product uses an expression in which operator precedence causes incorrect logic to be used.