What’s Vulnerable › Vulnerabilities

CVE-2024-29745: Android Pixel Information Disclosure Vulnerability

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2024-04-04
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-05 · updated 2026-06-17
• Weakness: CWE-908

Description

there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

• Android: all versions

References

• https://source.android.com/security/bulletin/pixel/2024-04-01
• https://source.android.com/security/bulletin/pixel/2024-04-01
• https://twitter.com/GrapheneOS/status/1775306481622995226
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-29745

Get alerted when CVE-2024-29745 or the next vulnerability affects your stack