CVE-2024-47014 - Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-330537292

Back Back to CVE browser

HIGH

Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-330537292

Published Oct 25, 2024

8.8

HIGH

CVSS 3.1

EPSS 0.24%

Description

Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-330537292.

Affected products

Vendor Google Product Android Default
unaffected
- Version
  Android kernel
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Google

Android

unaffected

Version	Status	Constraints
Android kernel	affected	-

Vendor Google Product Android Default
n/a
- Version
  android_kernel
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Google

Android

n/a

Version	Status	Constraints
android_kernel	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-276

Incorrect Default Permissions

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-42231
Advisory
https://source.android.com/security/bulletin/pixel/2024-10-01
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-42231		Advisory
https://source.android.com/security/bulletin/pixel/2024-10-01		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Google_Devices

Published Oct 25, 2024

Updated Oct 25, 2024

Reserved Sep 16, 2024

Link CVE-2024-47014

CISA Vulnrichment

Updated Oct 25, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-47014

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-47014

ENISA EUVD

Assigner Google_Devices

Published Oct 25, 2024

Updated Oct 25, 2024

Exploited since n/a

Link EUVD-2024-42231

EUVD-2024-42231