CVE-2024-20105
CVSS 3.1 Score 6.7 of 10 (medium)
Details
Published Jan 6, 2025
CWE ID 787
Summary
CVE-2024-20105 is a newly disclosed vulnerability affecting m4u software. This issue involves a missing bounds check leading to a possible out-of-bounds write. Malicious actors with System privileges could exploit this flaw to escalate their privileges, making it a significant security concern. User interaction is not required for exploitation, adding to its danger. The patch for this vulnerability is identified as ALPS09062027, and its Microsoft Security Vulnerability ID is MSV-1743.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.