CVE-2024-32896: Google Patches Actively Exploited Zero-Day Vulnerability in Pixel Devices
Google has released a critical security update for Pixel devices, addressing a zero-day vulnerability (CVE-2024-32896) that has been actively exploited in the wild. The flaw, classified as a high-severity elevation of privilege issue in Pixel Firmware, underscores the importance of promptly updating your devices to safeguard against potential attacks.
The tech giant has revealed limited information about the zero-day, stating only that it has indications of targeted exploitation. “There are indications that CVE-2024-32896 may be under limited, targeted exploitation.” However, the urgency of the patch highlights the severity of the threat. Alongside this zero-day fix, Google’s June security update also addresses over 40 additional vulnerabilities, including multiple critical elevation of privilege issues and high-severity remote code execution (RCE) bugs affecting various Pixel components.
This comprehensive security patch covers not only Pixel-specific flaws but also includes fixes for Qualcomm and Qualcomm closed-source components. While Pixel devices run on Android, they receive separate updates due to their unique features and hardware platform, which is directly managed by Google.
Users are strongly advised to immediately install the June 2024 security update to protect their Pixel devices from potential threats. The update is available for all supported Google devices and can be easily applied through the device settings.
To update your Pixel device, follow these steps:
- Go to Settings.
- Navigate to Security & privacy.
- Select System & updates.
- Tap on Security update.
- Click Install and restart your device to complete the update process.
By taking immediate action and updating your Pixel device, you can mitigate the risk of exploitation and ensure the security of your data. Stay vigilant and prioritize regular software updates to safeguard your devices from evolving cybersecurity threats.
