CyberSec.Space Logo
Back to CVE Browser

CVE-2024-29748

🔥 Known Exploited (CISA KEV)HIGH
7.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2024-04-05
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Affected Platforms (CPE)

💻
Google

Android

< 2024-04-05

References & Advisories

🔗 https://source.android.com/security/bulletin/pixel/2024-04-01
🔗 https://source.android.com/security/bulletin/pixel/2024-04-01
🔗 https://twitter.com/GrapheneOS/status/1775308208472813609
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-29748

Related Security Intelligence Articles

Global Cyber Intel Digest: July 20, 2026

Technical analysis of zero-day exploit chains against SonicWall SMA1000 appliances (UTA0533), NGINX regular expression heap corruption vulnerabilities (CVE-2026-42533), and Sandworm's (UAC-0145) ClickFix fake CAPTCHA campaigns.

2026-07-20

Related Vulnerabilities

CVE-2026-164047.4

Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153.

CVE-2026-163976.5

Clickjacking issue in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 153.

CVE-2026-163737.5

Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153.

CVE-2026-159009.6

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandb...