CVE-2024-20119
CVSS 3.1 Score 6.7 of 10 (medium)
Details
Published Nov 4, 2024
CWE ID 123
Summary
CVE-2024-20119 is a newly disclosed vulnerability in the mms software that allows for a potential out-of-bounds write issue. This flaw arises from an inaccurate bounds check, which could result in local privilege escalation with system-level execution privileges. Unlike some vulnerabilities, user interaction is not a prerequisite for exploitation. The patch for this issue is identified as ALPS09062301, and it has been assigned the internal reference number MSV-1620.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share