CVE-2024-47030 - Vulnerability Details - OpenCVE

Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-315191818.

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Google	Android Pixel

Configuration 1 [-]

cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://source.android.com/security/bulletin/pixel/2024-10-01

History

Thu, 24 Jul 2025 17:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		NVD-CWE-noinfo
CPEs		cpe:2.3:o:google:android:-:::::::*

Fri, 11 Jul 2025 13:45:00 +0000

Type	Values Removed	Values Added
Metrics	epss `{'score': 9e-05}`	epss `{'score': 0.0001}`

Mon, 28 Oct 2024 20:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Google Google android Google pixel
CPEs		cpe:2.3:h:google:pixel:::::::: cpe:2.3:o:google:android::::::::
Vendors & Products		Google Google android Google pixel
Metrics		cvssV3_1 `{'score': 5.1, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Fri, 25 Oct 2024 13:45:00 +0000

Type	Values Removed	Values Added
Description	N/A	Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-315191818.

Fri, 25 Oct 2024 10:45:00 +0000

Type	Values Removed	Values Added
Description		N/A
References		https://source.android.com/security/bulletin/pixel/2024-10-01

MITRE

Status: PUBLISHED

Assigner: Google_Devices

Published: 2024-10-25T10:34:07.037Z

Updated: 2024-10-28T20:02:02.939Z

Reserved: 2024-09-16T19:14:14.860Z

Link: CVE-2024-47030

Vulnrichment

Updated: 2024-10-28T20:01:54.384Z

NVD

Status : Analyzed

Published: 2024-10-25T11:15:17.390

Modified: 2025-07-24T15:17:42.800

Link: CVE-2024-47030

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-47030", "assignerOrgId": "83238938-5644-45f0-9007-c0392bcf6222", "state": "PUBLISHED", "assignerShortName": "Google_Devices", "dateReserved": "2024-09-16T19:14:14.860Z", "datePublished": "2024-10-25T10:34:07.037Z", "dateUpdated": "2024-10-28T20:02:02.939Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83238938-5644-45f0-9007-c0392bcf6222", "shortName": "Google_Devices", "dateUpdated": "2024-10-25T13:37:00.000Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "Information disclosure"}]}], "affected": [{"vendor": "Google", "product": "Android", "versions": [{"version": "Android kernel", "status": "affected"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-315191818."}], "references": [{"url": "https://source.android.com/security/bulletin/pixel/2024-10-01"}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-noinfo Not enough information"}]}], "affected": [{"vendor": "google", "product": "android", "cpes": ["cpe:2.3:o:google:android:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "*", "versionType": "custom"}]}, {"vendor": "google", "product": "pixel", "cpes": ["cpe:2.3:h:google:pixel:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "*", "versionType": "custom"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.1, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-10-28T17:19:37.344149Z", "id": "CVE-2024-47030", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-28T20:02:02.939Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.1, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-47030", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-10-28T17:19:37.344149Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:google:android:*:*:*:*:*:*:*:*"], "vendor": "google", "product": "android", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:google:pixel:*:*:*:*:*:*:*:*"], "vendor": "google", "product": "pixel", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-noinfo Not enough information"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-28T20:01:54.384Z"}}], "cna": {"affected": [{"vendor": "Google", "product": "Android", "versions": [{"status": "affected", "version": "Android kernel"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://source.android.com/security/bulletin/pixel/2024-10-01"}], "descriptions": [{"lang": "en", "value": "Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-315191818."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Information disclosure"}]}], "providerMetadata": {"orgId": "83238938-5644-45f0-9007-c0392bcf6222", "shortName": "Google_Devices", "dateUpdated": "2024-10-25T13:37:00.000Z"}}}, "cveMetadata": {"cveId": "CVE-2024-47030", "state": "PUBLISHED", "dateUpdated": "2024-10-28T20:02:02.939Z", "dateReserved": "2024-09-16T19:14:14.860Z", "assignerOrgId": "83238938-5644-45f0-9007-c0392bcf6222", "datePublished": "2024-10-25T10:34:07.037Z", "assignerShortName": "Google_Devices"}, "dataVersion": "5.1"}