Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2024-04-25. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
TRC analysis shows attackers exploiting CVE-2024-29745 in Google Pixel devices to gain initial access, then pivoting to connected cloud services through compromised authentication tokens. Mobile endpoint compromises can bypass traditional network segmentation controls. #MobileSecurity 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/cisa-kev-google-pixel-cve-2026-58704-improper-authorization-2026
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | android | - | - | - |