CVE-2024-32896 which is marked as being actively exploited in the wild in the June 2024 Pixel Update Bulletin is the 2nd part of the fix for CVE-2024-29748 vulnerability we described here:https://t.co/c4xnnbje04
— GrapheneOS (@GrapheneOS) June 13, 2024
As we explained there, none of this is actually Pixel specific.
The US government has issued a critical warning to federal employees using Google Pixel phones: update your devices by July 4 or cease using them. This urgent alert, spotted by Forbes, comes in response to a serious security vulnerability discovered in Android, known as CVE-2024-32896.
The Cybersecurity and Infrastructure Security Agency (CISA) has added this vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, emphasizing the severity of the threat. While the directive specifically targets government workers, security experts strongly advise all Pixel users to take immediate action. The
Google’s June security patch addresses this “High Severity” issue, which the company acknowledges is already under “limited, targeted exploitation.” The vulnerability potentially allows attackers to gain unauthorized control over Pixel devices.
Google’s June security patch addresses this “High Severity” issue, which the company acknowledges is already under “limited, targeted exploitation.” The vulnerability potentially allows attackers to gain unauthorized control over Pixel devices.
The security flaw is not limited to Pixel phones. According to GrapheneOS, a security-focused Android-based operating system, all Android devices are potentially at risk. While Pixel phones can be protected with the June update (Android 14 QPR3), other Android devices may have to wait for Android 15 for a fix.
If you haven’t received the June update automatically, you can go to Settings > Security & privacy > System & updates > Security update. You should ensure your device(s) is running the latest version to mitigate the risk.
This urgent update comes amid a backdrop of increasing security threats to Android devices. Recent reports have uncovered over 90 dangerous apps in the Google Play Store, downloaded more than 5.5 million times, and a new threat called “Rafel” targeting Android phones.
As the July 4 deadline approaches, all Pixel users are strongly encouraged to update their devices immediately. Non-Pixel Android users should remain vigilant and watch for updates from their device manufacturers.