CVE-2024-20863
CVSS 3.1 Score 6.7 of 10 (medium)
Details
Summary
CVE-2024-20863 is a vulnerability classified as a secondary cyber vulnerability. It is an out-of-bounds write vulnerability in SNAP in HAL prior to SMR May-2024 Release 1, which could be exploited by local privileged attackers to execute arbitrary code. This vulnerability has a risk score of 25 and a base severity of medium. The affected product is not explicitly mentioned, but it can be inferred that it relates to Samsung mobile devices based on the source email being from [email protected]. The exploitability score is 0.8, and the privileges required for exploitation are high, with no user interaction required. The attack vector is local, and the impact on integrity and confidentiality is high. The CVSS vector string follows the format: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating the different impacts and characteristics of the vulnerability. No information regarding remediation or potential danger to organizations is provided in the given text.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions