Google Issues Urgent Alert on Pixel Firmware Vulnerability Being Actively Exploited
Tech & AI | June 13, 2024, 5:34 a.m.
Google has issued a warning about a serious security flaw in the Pixel Firmware that has been exploited as a zero-day in the wild. The vulnerability, identified as CVE-2024-32896, is categorized as an elevation of privilege issue in Pixel Firmware. While details about the attacks are limited, Google has indicated that the flaw has been exploited in a targeted manner.
The latest security update released in June 2024 addresses a total of 50 vulnerabilities, including five related to Qualcomm chipsets. Some of the key issues resolved include denial-of-service problems in Modem and information disclosure flaws in GsmSs, ACPM, and Trusty components.
The updates are specifically for supported Pixel devices ranging from Pixel 5a with 5G to Pixel Fold. Previously, Google fixed two security flaws exploited by forensic companies to steal data, and Arm recently notified users of a memory-related vulnerability in GPU kernel drivers that is actively being exploited.