Exploiting the CVE-2024-32896 vulnerability could allow an attacker to have privilege escalation. Privilege escalation would allow an attacker to use an app to access and capture data that normally would not be available to the bad actor. It could also allow the attacker to take unauthorized actions that are typically reserved for users with higher privileges. As you can see, this is a serious problem and as a zero-day exploit, no patch or fix was available at the time the issue was discovered.
A vulnerability being exploited on Android has been patched on Pixel devices but not on Galaxy handsets|Image credit-PhoneArena
Samsung’s July security update does patch three critical Qualcomm vulnerabilities that were fixed for Pixel handsets in June leaving Samsung late once again. Samsung has already informed the public that component patches like the ones for the Qualcomm flaws take longer to disseminate than software and firmware fixes, but once again Pixel users had their phones secured first.
One of the updates in Samsung’s July security update did fix a current vulnerability, CVE-2024-31320, which Google warns “could lead to local escalation of privilege with no additional execution privileges needed.” Hopefully, next month’s Samsung security update for August will finally patch the CVE-2024-32896 flaw.
