Description
there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Metrics
CVSS 3.1 5.5/10
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Android | Android kernel | |
| android | - |
References
- https://source.android.com/security/bulletin/pixel/2024-04-01Vendor Advisory
- https://source.android.com/security/bulletin/pixel/2024-04-01Vendor Advisory
- https://twitter.com/GrapheneOS/status/1775306481622995226Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-29745US Government Resource
Timeline
- Published
- Apr 5, 2024
- Last modified
- Jun 17, 2026
- Added to CISA KEV
- Apr 4, 2024
- NVD status
- Analyzed