CVE-2024-29748: Android Pixel logic error allows local privilege escalation

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 17 September 2026. Confidence: medium.

high priorityIt is confirmed exploited in CISA KEV and enables local privilege escalation with high impact, though exploitation requires user interaction and a local foothold.

What it is

CVE-2024-29748 is a logic error in Android code that permits bypassing a security check, leading to local escalation of privilege. It affects Google Pixel devices and requires user interaction to exploit. Because it is listed in CISA's Known Exploited Vulnerabilities catalog, it is being exploited in the wild and warrants prompt patching.

Impact

An attacker who convinces a user to interact with a crafted input can gain elevated privileges on the device, potentially accessing sensitive data or system functions beyond normal app permissions. The CVSS vector shows high confidentiality, integrity and availability impact.

Attack surface

The vulnerability is local (AV:L) and requires user interaction (UI:R) with no privileges needed (PR:N), so an attacker needs a foothold on the device or a way to deliver a lure that the user acts on. It is not remotely reachable without user action.

Exploitation

CVE-2024-29748 is in CISA's Known Exploited Vulnerabilities catalog with a due date of 2024-04-25, indicating known exploitation. EPSS probability is low at 0.0067 (50th percentile), so mass scanning is unlikely, but targeted exploitation is confirmed by KEV.

What to do

• Apply the April 2024 Android Pixel security bulletin updates from Google as soon as possible.
• If patching is delayed, follow CISA's required action to apply vendor mitigations or discontinue use of affected Pixel devices.
• Restrict installation of apps from untrusted sources and review sideloaded applications on managed devices.
• Monitor for and remove suspicious apps or profiles that could deliver the user-interaction lure.
• Verify device patch level in MDM and block or isolate unpatched Pixel devices from sensitive access.

Detection

• Track Android security patch level on Pixel devices and alert on any device below the April 2024 bulletin.
• Monitor for unexpected privilege escalation events or anomalous app permission grants in Android logs.
• Review EMM/MDM telemetry for sideloaded or newly installed apps on Pixel devices around the time of suspected activity.
• Correlate user reports of suspicious prompts or app behavior with device patch status.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.