Local Privilege Escalation Vulnerability in Google Pixel Watch

CVE-2024-49731

What is CVE-2024-49731?

A logic error in the configuration file 'apk-versions.txt' on the Google Pixel Watch could potentially corrupt telemetry opt-in settings when a user sets up a new device. This vulnerability allows for local privilege escalation, meaning that an attacker with access to the watch can exploit this flaw without requiring any additional execution privileges. User interaction is needed to initiate the exploitation process, which may compromise user settings and data integrity.

References