CVE-2024-29745

🔥 Known Exploited (CISA KEV)MEDIUM

5.5

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-04-05

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Platforms (CPE)

💻

Google

Android

All versions

References & Advisories

🔗 https://source.android.com/security/bulletin/pixel/2024-04-01

🔗 https://twitter.com/GrapheneOS/status/1775306481622995226

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-29745

Related Vulnerabilities

CVE-2026-164047.4

Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153.

CVE-2026-163976.5

Clickjacking issue in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 153.

CVE-2026-163737.5

Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153.

CVE-2026-159009.6

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandb...