CVE-2024-20154

Summary

CVE-2024-20154 is a newly disclosed vulnerability affecting Modem software. The issue involves a missing bounds check leading to an out-of-bounds write. An attacker could exploit this flaw by establishing a connection with a rogue base station, potentially achieving remote code execution without user interaction or additional privileges. The vulnerability is identified as Patch ID: MOLY00720348 and Issue ID: MSV-2392.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.