CVE-2024-0018
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Feb 16, 2024
Updated: Dec 16, 2024
CWE ID 122
CWE ID 787
Summary
CVE-2024-0018 is a heap buffer overflow vulnerability affecting the convertYUV420Planar16ToY410 function in ColorConverter.cpp. An attacker can exploit this issue by writing past the end of the allocated memory, resulting in a possible out-of-bounds write. This vulnerability allows for local privilege escalation, meaning an attacker can elevate their current privileges without requiring additional execution privileges. Notably, user interaction is not required for exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Android