CVE-2024-20108

Summary

CVE-2024-20108 is a recently disclosed vulnerability affecting the atci software. This issue involves a missing bounds check, resulting in a possible out-of-bounds write. The consequence of this vulnerability is a local privilege escalation, granting the attacker System execution privileges. Notably, user interaction is not required for the exploitation of this vulnerability. The patch for this issue is identified as ALPS09082988, and the internal issue reference is MSV-1774.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.