Google has warned that a security flaw impacting Pixel Firmware has been exploited in the wild as a zero-day.
https://source.android.com/docs/security/bulletin/pixel/2024-06-01
The high-severity vulnerability, tagged as CVE-2024-32896, has been described as an elevation of privilege issue in Pixel Firmware.
The company did not share any additional details related to the nature of attacks exploiting it, but noted "there are indications that CVE-2024-32896 may be under limited, targeted exploitation."
@ecksmc The GrapheneOS team has a thread providing a bit more information about the vulnerability and the fix: