Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2024-47020: Google Pixel Android ABL component discloses sensitive information

CVE-2024-47020 · published 2 years ago

Summary

On certain Google Pixel Android devices, a software bug in the ABL component can allow unauthorized access to sensitive data. This could potentially put user information at risk. Update to the latest Android version to fix this issue.

What to do

Update google :unknown: to version Pixel-family specific:2024-10-05.
Update google android to version 2024-10-05 or later.

Affected software

Ecosystem	Vendor	Product	Affected versions
–	google	android	< 2024-10-05 `cpe:2.3:o:google:android::::::::`
Android	google	:unknown:	>= Pixel-family specific:0, < Pixel-family specific:2024-10-05 Fix: upgrade to Pixel-family specific:2024-10-05

Original advisory text

PUB-A-331966488

Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ABL component, A-331966488.

References

https://source.android.com/security/bulletin/2024-10-01 Vendor Advisory
https://source.android.com/security/bulletin/pixel/2024-10-01 Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

7.5 High

Exploitation

<1% chance of attack within 30 days

Timeline

Published1 Oct 2024

Updated26 Oct 2026

First seen7 Mar 2026

Sources

CVE-2024-47020 · NVD

PUB-A-331966488 · OSV

Track software like this

Free during beta