CVE-2023-32848

Summary

CVE-2023-32848 is a newly disclosed vulnerability affecting the vdec component. This issue involves type confusion leading to a possible out-of-bounds write. The consequences of this vulnerability are significant, allowing for local privilege escalation with System execution privileges. Notably, user interaction is not required for exploitation. The patch for this issue carries the ID ALPS08163896.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.