CVE-2024-29745
Published 2024-04-05 · Updated 2026-06-17 · Source dsap-vuln-management@google.com
Summary
CVE-2024-29745 is a medium-severity (CVSS 5.5) vulnerability in Android Pixel. CISA added it to the Known Exploited Vulnerabilities catalog on April 4, 2024, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by April 25, 2024. CISA does not currently list it as used in ransomware campaigns. Android has 17 vulnerabilities in the KEV catalog, 0 of them linked to ransomware.
All 17 known-exploited Android vulnerabilities →Description
there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CISA Known-Exploited Vulnerability
Product: Android — Pixel
Name: Android Pixel Information Disclosure Vulnerability
Date added: 2024-04-04 · Due: 2024-04-25
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.