TGViewer
Android Security & Malware Android Security & Malware @androidmalware · 44.7K subscribers
Post #2199 11.9K
Google fixed 2 Pixel vulnerabilities which are being actively exploited in the wild by forensic companies
CVE-2024-29745 refers to a vulnerability in the fastboot firmware used to support unlocking/flashing/locking. Forensic companies are rebooting devices in After First Unlock state into fastboot mode on Pixels and other devices to exploit vulnerabilities there and then dump memory.
CVE-2024-29748 refers to a vulnerability providing the ability to interrupt a factory reset triggered by a device admin app. It appears they've implemented a partial solution in firmware.
https://discuss.grapheneos.org/d/11860-vulnerabilities-exploited-in-the-wild-fixed-based-on-grapheneos-reports
GrapheneOS Discussion Forum Vulnerabilities exploited in the wild fixed based on GrapheneOS reports - GrapheneOS Discussion Forum
  • ❤ 17
  • 👍 1
More from @androidmalware
  1. Oct 7, 2026CVE-2026-23866: Finding a Whatsapp NDay https://numb3rs.re/posts/cve-2026-23866-finding-a-…
  2. Oct 1, 2026CVE-2026-86950: The Great Glyph Grift An in-the-wild iOS bug with a possible WhatsApp zero…
  3. Sep 29, 2026CVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF — iOS/macOS kernel vulnerability…
  4. Sep 29, 2026How we found 24 Android vulnerabilities using our open source AI security agent https://gi…
  5. Sep 29, 2026From BlackCat to Panda Workshop: Inside the Evolving C2 Panel Behind RATHat https://www.cl…
  6. Sep 28, 2026apk-reverse: An Agent Skill for Android APK reverse engineering, debloating, ad removal, s…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →