Google Warns of Pixel Firmware Security Flaw Exploited as Zero-Day

Google disclosed CVE-2024-32896, a high-severity elevation-of-privilege flaw in Pixel firmware that has been exploited in the wild and is described as potentially under limited, targeted exploitation. The issue, related to an earlier mitigation CVE-2024-29748, affects the broader Android platform (not just Pixel devices) and interrupts the factory reset process; Google and AOSP have issued fixes (Android 14 QPR3 and Pixel security updates) and recommend users install available updates.