CVE-2024-20122

Summary

CVE-2024-20122 is a newly disclosed vulnerability affecting the vdec component. The issue stems from a design flaw that allows for an out-of-bounds read. This vulnerability could potentially result in local information disclosure, granting the attacker System execution privileges without requiring user interaction. The patch for this issue is identified as ALPS09008925, and it is also referred to as MSV-1572.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.