Google Warns: Android Zero-Day Flaws in Pixel Phones Exploited by Forensic Companies

Google disclosed two high-severity zero-day vulnerabilities impacting Pixel devices — CVE-2024-29745 (bootloader/fastboot information disclosure) and CVE-2024-29748 (firmware privilege escalation). GrapheneOS reports these flaws are being actively exploited in the wild by forensic companies to reboot devices into fastboot, dump memory and potentially interrupt factory resets, with exploitation described as limited and targeted.