CVE-2024-20134

Summary

CVE-2024-20134 is a newly disclosed vulnerability affecting the ril component. It involves a missing bounds check that leads to a possible out-of-bounds write. This issue could be exploited to grant local privilege escalation with System execution privileges, making it a significant security concern. User interaction is not required for exploitation, increasing the potential threat. The patch for this vulnerability is identified as ALPS09154589 and the internal issue reference is MSV-1866.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.