CVE-2024-32896: high-severity vulnerability in Google Android
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
A logic error in the code allows attackers to bypass security controls and gain higher privileges on the system. This requires local access and user interaction, but does not need special permissions to exploit.
A logic flaw (CWE-783: Operator Precedence Logic Error) enables privilege escalation through a bypass mechanism requiring local code execution and user interaction. The vulnerability does not require elevated initial privileges, allowing authenticated users to escalate to higher privilege levels.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.