**Android** security advisory: [Android Security Bulletin—September ...

Not Simon 🐐 /

npub14g0…znd6

2024-09-03 18:38:08

**Android** security advisory: [Android Security Bulletin—September 2024](https://source.android.com/docs/security/bulletin/2024-09-01 )
Don't shit your pants like I did when I saw *"Note: There are indications that CVE-2024-32896 may be under limited, targeted exploitation."* and thought A GODDAMN ZERO-DAY. Well yes, but actually no: [CVE-2024-32896](https://nvd.nist.gov/vuln/detail/CVE-2024-32896 ) (7.8 high) Android Pixel Privilege Escalation Vulnerability was disclosed back on 11 June 2024. This apparently is a backporting of that patch to the rest of Android.
Don't forget to check out the following updated security bulletins:<li><a href="https://source.android.com/docs/security/bulletin/pixel/2024-09-01"; target="_blank" rel="nofollow noopener noreferrer">Pixel Update Bulletin—September 2024</a></li><li><a href="https://source.android.com/docs/security/bulletin/aaos/2024-09-01"; target="_blank" rel="nofollow noopener noreferrer">Android Automotive OS Update Bulletin—September 2024</a></li><li><a href="https://source.android.com/docs/security/bulletin/wear/2024/2024-09-01"; target="_blank" rel="nofollow noopener noreferrer">Wear OS Security Bulletin—September 2024</a></li><li>No Pixel Watch (at this time)</li>

No mention of exploitation (of anything new)

#PatchTuesday #Android #vulnerability #CVE

Author Public Key

npub14g0mj0fmn0sepfuhp2wupyk7d8xyz7rezpmrx2gfsav9vxlwxypq4xznd6

Show more details

Published at

2024-09-03 18:38:08

Kind type

1 Short Text Note

Event JSON

{ "id": "6421b34a2959503c7567dccc3f57ebb776d9c47681a781cf2c30706fbf2b142c", "pubkey": "aa1fb93d3b9be190a7970a9dc092de69cc41787910763329098758561bee3102", "created_at": 1725388688, "kind": 1, "tags": [ [ "proxy", "https://infosec.exchange/@screaminggoat/113075073085347837", "web" ], [ "t", "cve" ], [ "t", "android" ], [ "t", "vulnerability" ], [ "t", "patchtuesday" ], [ "proxy", "https://infosec.exchange/users/screaminggoat/statuses/113075073085347837", "activitypub" ], [ "L", "pink.momostr" ], [ "l", "pink.momostr.activitypub:https://infosec.exchange/users/screaminggoat/statuses/113075073085347837", "pink.momostr" ], [ "-" ] ], "content": "**Android** security advisory: [Android Security Bulletin—September 2024](https://source.android.com/docs/security/bulletin/2024-09-01 )\nDon't shit your pants like I did when I saw *\"Note: There are indications that CVE-2024-32896 may be under limited, targeted exploitation.\"* and thought A GODDAMN ZERO-DAY. Well yes, but actually no: [CVE-2024-32896](https://nvd.nist.gov/vuln/detail/CVE-2024-32896 ) (7.8 high) Android Pixel Privilege Escalation Vulnerability was disclosed back on 11 June 2024. This apparently is a backporting of that patch to the rest of Android.\nDon't forget to check out the following updated security bulletins:\u003cli\u003e\u003ca href=\"https://source.android.com/docs/security/bulletin/pixel/2024-09-01\" target=\"_blank\" rel=\"nofollow noopener noreferrer\"\u003ePixel Update Bulletin—September 2024\u003c/a\u003e\u003c/li\u003e\u003cli\u003e\u003ca href=\"https://source.android.com/docs/security/bulletin/aaos/2024-09-01\" target=\"_blank\" rel=\"nofollow noopener noreferrer\"\u003eAndroid Automotive OS Update Bulletin—September 2024\u003c/a\u003e\u003c/li\u003e\u003cli\u003e\u003ca href=\"https://source.android.com/docs/security/bulletin/wear/2024/2024-09-01\" target=\"_blank\" rel=\"nofollow noopener noreferrer\"\u003eWear OS Security Bulletin—September 2024\u003c/a\u003e\u003c/li\u003e\u003cli\u003eNo Pixel Watch (at this time)\u003c/li\u003e\n\nNo mention of exploitation (of anything new)\n\n#PatchTuesday #Android #vulnerability #CVE", "sig": "3b2a2bcafbae95cd3ec6ab0208363720ae44aea900f2af6eb0129e1f39ea5e82d4952400022240bb2db6346725ab78257d335f4e81ef8d04f43146a49b8290bc" }