Google has rolled out its monthly security updates for the Android operating system, addressing a high-severity flaw that is being actively exploited in the wild. The vulnerability, CVE-2024-32896, carries a CVSS score of 7.8 and impacts the Android Framework component, leading to local privilege escalation without additional execution privileges.
According to the NIST National Vulnerability Database (NVD), the issue stems from a logic error that allows attackers to escalate their privileges locally. Google’s Android Security Bulletin for September 2024 noted that there are indications this vulnerability is being exploited in limited, targeted attacks.
Background and Impact
Initially disclosed in June 2024 as affecting Google’s Pixel lineup, the impact of CVE-2024-32896 has since been confirmed to extend across the entire Android ecosystem. Although details of the in-the-wild exploitation remain scarce, GrapheneOS maintainers have said that CVE-2024-32896 fixes a partial solution for CVE-2024-29748, another Android flaw weaponized by forensic companies.
While the flaw requires physical access to the device to be exploited and affects the factory reset process, Google emphasizes that additional exploits would be needed to fully compromise a device.
Recommended Actions
Google is collaborating with original equipment manufacturers (OEMs) to ensure timely patches are available across devices. The tech giant urges users to apply the latest security updates as soon as they are available to mitigate any risks.
As a best practice, always ensure your devices are up-to-date with the latest security patch
