{"metadata": {"vulnerability": "CVE-2024-29748", "count": 60, "kinds": {"milestone": 7, "sighting": 23, "kev": 11, "other": 19}}, "data": [{"timestamp": "2024-03-19T15:05:26.954Z", "date_only": false, "value": "2024-03-19T15:05:26.954Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-29748", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-04-02T05:02:57.489Z", "date_only": false, "value": "2024-04-02T05:02:57.489255Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-29748", "record": "GSD-2024-29748", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-04-02T22:00:00Z", "date_only": false, "value": "2024-04-02T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0763", "record": "WID-SEC-W-2024-0763", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-04-02T22:00:00Z", "date_only": false, "value": "2024-04-02T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0763", "record": "WID-SEC-W-2024-0763", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-04-02T22:00:00Z", "date_only": false, "value": "2024-04-02T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0763", "record": "WID-SEC-W-2024-0763", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-04-02T22:00:00Z", "date_only": false, "value": "2024-04-02T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0763", "record": "WID-SEC-W-2024-0763", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-04-03T18:11:05Z", "date_only": false, "value": "2024-04-03T18:11:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/4773", "record": "CVE-2024-29748", "field": "creation_timestamp", "uuid": "02968188-49a7-4a76-9936-20378389398c", "content": "\ud83d\udd25 Google's Pixel smartphones under attack! \n \nTwo new Android security flaws - CVE-2024-29745 &amp; CVE-2024-29748 - uncovered, exploited in the wild by forensic companies. \n \nLearn more: https://thehackernews.com/2024/04/google-warns-android-zero-day-flaws-in.html", "url": "https://t.me/thehackernews/4773"}, {"timestamp": "2024-04-03T18:52:14Z", "date_only": false, "value": "2024-04-03T18:52:14.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/t2A5Sw8v34JHXVdTZz5ErsJUM1Paguv9OF_bCT2bysC8_r4", "record": "CVE-2024-29748", "field": "creation_timestamp", "uuid": "eabbc0b6-7858-46f1-9a38-9b28b3ca77a2"}, {"timestamp": "2024-04-03T19:30:59Z", "date_only": false, "value": "2024-04-03T19:30:59.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/6Xee1DRA00BD3p5F_TVknidpMD1RGFUJArRoLX5-y9mgwA", "record": "CVE-2024-29748", "field": "creation_timestamp", "uuid": "6c640f5d-ddd3-4a1a-87b4-f8226845696a"}, {"timestamp": "2024-04-03T19:44:30Z", "date_only": false, "value": "2024-04-03T19:44:30.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KomunitiSiber/1730", "record": "CVE-2024-29748", "field": "creation_timestamp", "uuid": "6d4fc1f4-5962-4a34-8114-a78b3794e2c2", "content": "Google Warns: Android Zero-Day Flaws in Pixel Phones Exploited by Forensic Companies\nhttps://thehackernews.com/2024/04/google-warns-android-zero-day-flaws-in.html\n\nGoogle has disclosed that two Android security flaws impacting its Pixel smartphones have been exploited in the wild by forensic companies.\nThe high-severity zero-day vulnerabilities are as follows -\n\nCVE-2024-29745\u00a0- An information disclosure flaw in the bootloader component\nCVE-2024-29748\u00a0- A privilege escalation flaw in the firmware component\n\n\"There are indications that the [", "url": "https://t.me/KomunitiSiber/1730"}, {"timestamp": "2024-04-03T20:18:46Z", "date_only": false, "value": "2024-04-03T20:18:46.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/4CwcQ3Ic_Xt5y6S5OUsDPaWDnWfEMWK-Mt5qwB1-C5tXFg", "record": "CVE-2024-29748", "field": "creation_timestamp", "uuid": "68081362-da2f-4d9e-bf49-4846285a0f8e"}, {"timestamp": "2024-04-04T00:00:00Z", "date_only": false, "value": "2024-04-04T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2024-29748", "field": "timestamps.asserted_at", "uuid": "6abae487-bfe7-4470-adcb-9f90d9fe856c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-04-04T00:00:00Z", "date_only": false, "value": "2024-04-04T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-29748", "field": "timestamps.asserted_at", "uuid": "bbb291f3-b331-480a-8d93-536014c7edf5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-04-04T00:00:00Z", "date_only": true, "value": "2024-04-04", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-29748", "field": "containers.adp.0.metrics.2.other.content.dateAdded"}, {"timestamp": "2024-04-04T00:00:00Z", "date_only": false, "value": "2024-04-04T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-29748", "field": "evidence.0.details.added_date", "uuid": "bbb291f3-b331-480a-8d93-536014c7edf5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-04-04T00:00:00Z", "date_only": true, "value": "2024-04-04", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2024-29748", "field": "evidence.0.details.date_added", "uuid": "6abae487-bfe7-4470-adcb-9f90d9fe856c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-04-04T00:00:00Z", "date_only": false, "value": "2024-04-04T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2024-29748", "field": "timestamps.first_seen_at", "uuid": "6abae487-bfe7-4470-adcb-9f90d9fe856c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-04-04T00:00:00Z", "date_only": false, "value": "2024-04-04T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-29748", "field": "timestamps.first_seen_at", "uuid": "bbb291f3-b331-480a-8d93-536014c7edf5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-04-04T00:00:00Z", "date_only": false, "value": "2024-04-04T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0272", "record": "CERTFR-2024-AVI-0272", "field": "last_revision_date"}, {"timestamp": "2024-04-04T00:00:00Z", "date_only": false, "value": "2024-04-04T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0272", "record": "CERTFR-2024-AVI-0272", "field": "initial_release_date"}, {"timestamp": "2024-04-04T00:00:00Z", "date_only": false, "value": "2024-04-04T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0272", "record": "CERTFR-2024-AVI-0272", "field": "revisions.0.revision_date"}, {"timestamp": "2024-04-04T00:00:00Z", "date_only": false, "value": "2024-04-04T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2024-29748", "field": "status.status_updated_at", "uuid": "6abae487-bfe7-4470-adcb-9f90d9fe856c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-04-04T00:00:00Z", "date_only": false, "value": "2024-04-04T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-29748", "field": "status.status_updated_at", "uuid": "bbb291f3-b331-480a-8d93-536014c7edf5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-04-04T00:00:00Z", "date_only": false, "value": "2024-04-04T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-29748", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2024-04-04T00:58:52Z", "date_only": false, "value": "2024-04-04T00:58:52.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/tengkorakcybercrewz/4910", "record": "CVE-2024-29748", "field": "creation_timestamp", "uuid": "0c1f7d23-77de-4672-b16f-9cf76f44a941", "content": "The Hacker News\nGoogle Warns: Android Zero-Day Flaws in Pixel Phones Exploited by Forensic Companies\n\nGoogle has disclosed that two Android security flaws impacting its Pixel smartphones have been exploited in the wild by forensic companies.\nThe high-severity zero-day vulnerabilities are as follows -\n\nCVE-2024-29745&nbsp;- An information disclosure flaw in the bootloader component\nCVE-2024-29748&nbsp;- A privilege escalation flaw in the firmware component\n\n\"There are indications that the [", "url": "https://t.me/tengkorakcybercrewz/4910"}, {"timestamp": "2024-04-04T00:58:52Z", "date_only": false, "value": "2024-04-04T00:58:52.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/tengkorakcybercrewz/926", "record": "CVE-2024-29748", "field": "creation_timestamp", "uuid": "8d74b0ce-b977-411d-a8d2-f3b0ad6e77d2", "content": "The Hacker News\nGoogle Warns: Android Zero-Day Flaws in Pixel Phones Exploited by Forensic Companies\n\nGoogle has disclosed that two Android security flaws impacting its Pixel smartphones have been exploited in the wild by forensic companies.\nThe high-severity zero-day vulnerabilities are as follows -\n\nCVE-2024-29745&nbsp;- An information disclosure flaw in the bootloader component\nCVE-2024-29748&nbsp;- A privilege escalation flaw in the firmware component\n\n\"There are indications that the [", "url": "https://t.me/tengkorakcybercrewz/926"}, {"timestamp": "2024-04-04T01:27:13Z", "date_only": false, "value": "2024-04-04T01:27:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cKure/12661", "record": "CVE-2024-29748", "field": "creation_timestamp", "uuid": "64fcb379-de1f-4eec-99f5-f7eb860d20e7", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CVE-2024-29745 and CVE-2024-29748. Google fixes two Pixel zero-day flaws exploited by forensics firms.\n\nhttps://www.bleepingcomputer.com/news/security/google-fixes-two-pixel-zero-day-flaws-exploited-by-forensics-firms/", "url": "https://t.me/cKure/12661"}, {"timestamp": "2024-04-04T12:16:07Z", "date_only": false, "value": "2024-04-04T12:16:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/213968", "record": "CVE-2024-29748", "field": "creation_timestamp", "uuid": "3bf61be0-ef49-493e-8b4f-e3ce89cee935", "content": "https://ift.tt/NBYES5q\nCVE-2024-29748 Exploitation", "url": "https://t.me/ctinow/213968"}, {"timestamp": "2024-04-04T18:10:03Z", "date_only": false, "value": "2024-04-04T18:10:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-29748", "field": "creation_timestamp", "uuid": "1fd3ad29-4d55-4445-9116-e856bdaeadd8"}, {"timestamp": "2024-04-04T18:21:57Z", "date_only": false, "value": "2024-04-04T18:21:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/5603", "record": "CVE-2024-29748", "field": "creation_timestamp", "uuid": "66957f3e-4e75-4df7-acfe-981479826706", "content": "Google \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u0432\u0435 0-day \u0432 Pixel Phone, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0434\u043b\u044f \u0440\u0430\u0437\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a\u00a0\u0434\u0430\u043d\u043d\u044b\u043c \u0432 \u0445\u043e\u0434\u0435 \u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u0432 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0430\u0445 \u0441\u0438\u043b\u043e\u0432\u044b\u0445 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0437\u0430\u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440.\n\nCVE-2024-29745 \u0438 CVE-2024-29748 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0441\u043f\u0435\u0446\u0430\u043c\u0438 \u0438\u0437 GrapheneOS \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 \u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 Pixel.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u0430\u043c\u0430 Google \u043d\u0435 \u0441\u0442\u0430\u043b\u0430 \n\u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0448\u0438\u0441\u044c \u0444\u043e\u0440\u043c\u0443\u043b\u0438\u0440\u043e\u0432\u043a\u043e\u0439 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f.\n\nCVE-2024-29745 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u0430 \u043a\u0430\u043a \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 Pixel, \u0430 CVE-2024-29748 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043a\u0430\u043a \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 Pixel.\n\n\u041a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438 GrapheneOS, \u044d\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u043b\u0438  \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0437\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Google Pixel, \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0443 \u043d\u0438\u0445 \u0431\u044b\u043b \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f.\n\nGrapheneOS \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445 \u0435\u0449\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434, \u043f\u043e\u0434\u0435\u043b\u0438\u0432\u0448\u0438\u0441\u044c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e, \u043d\u043e \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u044f \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0448\u0438\u0440\u043e\u043a\u043e\u043c\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439.\n\nCVE-2024-29745 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 fastboot, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0440\u0430\u0437\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438/\u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438/\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438.\n\n\u041a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438 \u00ab\u041f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0432\u043e\u0439 \u0440\u0430\u0437\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438\u00bb \u0432 \u0440\u0435\u0436\u0438\u043c \u0431\u044b\u0441\u0442\u0440\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0430 Pixels \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0447\u0442\u043e\u0431\u044b \u0442\u0443\u0442 \u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0437\u0430\u0442\u0435\u043c \u0441\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c.\n\nGoogle \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u043e\u0431\u043d\u0443\u043b\u0438\u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0431\u044b\u0441\u0442\u0440\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0432\u043a\u043b\u044e\u0447\u0438\u0432 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 USB \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u043e\u0431\u043d\u0443\u043b\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u043b\u043e \u0430\u0442\u0430\u043a\u0438 \u043d\u0435\u043f\u0440\u0430\u043a\u0442\u0438\u0447\u043d\u044b\u043c\u0438.\n\n\u0414\u0440\u0443\u0433\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0431\u0440\u043e\u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u043a \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0438\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c, \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e API \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0442\u0430\u043a\u043e\u0439 \u0441\u0431\u0440\u043e\u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c.\n\nGrapheneOS \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 Google \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u0438\u0447\u043d\u044b\u043c, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u043b\u0430\u0441\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0447\u0438\u0441\u0442\u043a\u0443, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0432 \u043f\u0438\u0442\u0430\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\nGrapheneOS \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0432\u043e\u0434\u0430 PIN-\u043a\u043e\u0434\u0430 \u0438 \u043f\u0430\u0440\u043e\u043b\u044f, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u0431\u0435\u0437 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0430\u043c\u0435\u0440\u0435\u043d \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u043d\u0430\u0434 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043a\u043b\u044e\u0447\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432.\n\n\u0418, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u043e\u0431\u0435\u0449\u0430\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u0434\u0430\u043d\u044b \u0438 \u043a\u0443\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0438\u0437 \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0431\u0443\u0434\u0443\u0442 \u043d\u0443\u0436\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u043b\u0430\u0437\u0435\u0439\u043a\u0438.", "url": "https://t.me/true_secator/5603"}, {"timestamp": "2024-04-05T20:02:16.425Z", "date_only": false, "value": "2024-04-05T20:02:16.425Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-29748", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-04-05T20:02:16.425Z", "date_only": false, "value": "2024-04-05T20:02:16.425Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Google_Devices", "record": "CVE-2024-29748", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-04-05T20:15:08Z", "date_only": false, "value": "2024-04-05T20:15:08Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-W9XX-XHPG-C678", "record": "GHSA-W9XX-XHPG-C678", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-04-05T20:15:08.407Z", "date_only": false, "value": "2024-04-05T20:15:08.407", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-29748", "record": "FKIE_CVE-2024-29748", "field": "published"}, {"timestamp": "2024-04-05T20:15:08.407Z", "date_only": false, "value": "2024-04-05T20:15:08.407", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2024-29748", "record": "GSD-2024-29748", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-04-05T21:32:44Z", "date_only": false, "value": "2024-04-05T21:32:44Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W9XX-XHPG-C678", "record": "GHSA-W9XX-XHPG-C678", "field": "published"}, {"timestamp": "2024-04-08T22:52:33.780Z", "date_only": false, "value": "2024-04-08T22:52:33.780", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-29748", "record": "GSD-2024-29748", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-04-25T00:00:00Z", "date_only": true, "value": "2024-04-25", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2024-29748", "field": "evidence.0.details.due_date", "uuid": "6abae487-bfe7-4470-adcb-9f90d9fe856c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-05-01T16:18:07.255Z", "date_only": false, "value": "2024-05-01T16:18:07.255435Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-29748", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-05-01T16:18:07.255Z", "date_only": false, "value": "2024-05-01T16:18:07.255435Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-29748", "record": "FKIE_CVE-2024-29748", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-05-13T19:22:28Z", "date_only": false, "value": "2024-05-13T19:22:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/androidMalware/2199", "record": "CVE-2024-29748", "field": "creation_timestamp", "uuid": "20e95f9e-5246-4805-8e43-4b767a6908b9", "content": "Google fixed 2 Pixel vulnerabilities which are being actively exploited in the wild by forensic companies\nCVE-2024-29745 refers to a vulnerability in the fastboot firmware used to support unlocking/flashing/locking. Forensic companies are rebooting devices in After First Unlock state into fastboot mode on Pixels and other devices to exploit vulnerabilities there and then dump memory.\nCVE-2024-29748 refers to a vulnerability providing the ability to interrupt a factory reset triggered by a device admin app. It appears they've implemented a partial solution in firmware.\nhttps://discuss.grapheneos.org/d/11860-vulnerabilities-exploited-in-the-wild-fixed-based-on-grapheneos-reports", "url": "https://t.me/androidMalware/2199"}, {"timestamp": "2024-08-02T01:10:55.524Z", "date_only": false, "value": "2024-08-02T01:10:55.524Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-29748", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T18:07:06.121Z", "date_only": false, "value": "2024-08-15T18:07:06.121+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0763", "record": "WID-SEC-W-2024-0763", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-23T02:10:53Z", "date_only": false, "value": "2025-02-23T02:10:53.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-29748", "field": "creation_timestamp", "uuid": "bf736978-7051-4f5d-a19c-f85b883871ed"}, {"timestamp": "2025-07-30T15:40:19.492Z", "date_only": false, "value": "2025-07-30T15:40:19.492266Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lv6xfsphyg2o", "record": "CVE-2024-29748", "field": "creation_timestamp", "uuid": "8403f1c8-18dc-4468-ae31-3c435305e87c", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lv6xfsphyg2o"}, {"timestamp": "2025-10-01T17:45:01Z", "date_only": false, "value": "2025-10-01T17:45:01.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/NsE_mTFCOjSJbTHln_R1YZZFRmKmacy2al4F27E4YEx6XJl7yQ", "record": "CVE-2024-29748", "field": "creation_timestamp", "uuid": "7f6a4bcf-97af-4001-8b8b-b0eb67849e02"}, {"timestamp": "2025-10-21T23:05:21.822Z", "date_only": false, "value": "2025-10-21T23:05:21.822Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-29748", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:05:21.822Z", "date_only": false, "value": "2025-10-21T23:05:21.822Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-29748", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:33:00Z", "date_only": false, "value": "2025-10-22T00:33:00Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-W9XX-XHPG-C678", "record": "GHSA-W9XX-XHPG-C678", "field": "modified"}, {"timestamp": "2026-02-02T12:26:39.412Z", "date_only": false, "value": "2026-02-02T12:26:39.412699Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/31ea124f-6aa9-46f6-808d-ef9e1b4ec290", "record": "CVE-2024-29748", "field": "creation_timestamp", "uuid": "f83fe657-ad61-484d-9fa0-c7057e23936d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/31ea124f-6aa9-46f6-808d-ef9e1b4ec290"}, {"timestamp": "2026-02-02T12:26:39.412Z", "date_only": false, "value": "2026-02-02T12:26:39.412699Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/31ea124f-6aa9-46f6-808d-ef9e1b4ec290", "record": "CVE-2024-29748", "field": "creation_timestamp", "uuid": "934d7ba0-1566-4a93-9ee8-bfb3e4974b52", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/31ea124f-6aa9-46f6-808d-ef9e1b4ec290"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2024-29748", "field": "timestamps.recorded_at", "uuid": "6abae487-bfe7-4470-adcb-9f90d9fe856c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T07:23:00.713Z", "date_only": false, "value": "2026-06-17T07:23:00.713", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-29748", "record": "FKIE_CVE-2024-29748", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:41.147Z", "date_only": false, "value": "2026-06-19T12:46:41.147686Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d802c685-d370-4fa3-b941-374c855fed63", "record": "CVE-2024-29748", "field": "creation_timestamp", "uuid": "4b92c9d2-427f-46d5-99ad-5bc035f99383", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d802c685-d370-4fa3-b941-374c855fed63"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-29748", "field": "timestamps.recorded_at", "uuid": "bbb291f3-b331-480a-8d93-536014c7edf5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:20.648Z", "date_only": false, "value": "2026-06-23T11:14:20.648997Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/bbb291f3-b331-480a-8d93-536014c7edf5", "record": "CVE-2024-29748", "field": "creation_timestamp", "uuid": "b4bb3171-6e1c-428c-8cc3-a0cbcca40965", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/bbb291f3-b331-480a-8d93-536014c7edf5"}, {"timestamp": "2026-06-23T14:05:52.590Z", "date_only": false, "value": "2026-06-23T14:05:52.590857Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e6a4fd11-a7e2-4923-b2ab-652e4bdb6d9d", "record": "CVE-2024-29748", "field": "creation_timestamp", "uuid": "736059ae-a66d-400f-a1b3-7207d69f71ff", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e6a4fd11-a7e2-4923-b2ab-652e4bdb6d9d"}, {"timestamp": "2026-07-06T11:00:07.997Z", "date_only": false, "value": "2026-07-06T11:00:07.997167Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/204", "record": "CVE-2024-29748", "field": "creation_timestamp", "uuid": "c12a8771-4304-4a6d-8f7b-a07fff33bd29", "url": "https://t.me/ZerodayAlert/204"}, {"timestamp": "2026-07-07T00:00:20.110Z", "date_only": false, "value": "2026-07-07T00:00:20.110073Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/204", "record": "CVE-2024-29748", "field": "creation_timestamp", "uuid": "39d1f8c1-bb03-4773-87b8-d542ebd1fa2e", "url": "https://t.me/ZerodayAlert/204"}, {"timestamp": "2026-07-12T00:00:16.685Z", "date_only": false, "value": "2026-07-12T00:00:16.685536Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/204", "record": "CVE-2024-29748", "field": "creation_timestamp", "uuid": "e17862a3-9a58-4eba-94b1-4b50c907c5c2", "url": "https://t.me/ZerodayAlert/204"}]}
