CVE-2024-29745

CVE-2024-29745 is confirmed as a legitimate zero-day vulnerability actively exploited by forensics firms against Pixel devices, as evidenced by Google Project Zero acknowledgment and multiple high-signal news reports from reputable sources. The vulnerability allows local information disclosure through uninitialized data without requiring user interaction or elevated privileges, making it a practical exploitation vector. High confidence is warranted despite the MEDIUM CVSS score due to real-world exploitation evidence and official patching by Google.