CVSS 3.1 Score 6.7 of 10 (medium)


Published May 7, 2024


CVE-2024-20863 is a vulnerability classified as a secondary cyber vulnerability. It is an out-of-bounds write vulnerability in SNAP in HAL prior to SMR May-2024 Release 1, which could be exploited by local privileged attackers to execute arbitrary code. This vulnerability has a risk score of 25 and a base severity of medium. The affected product is not explicitly mentioned, but it can be inferred that it relates to Samsung mobile devices based on the source email being from [email protected]. The exploitability score is 0.8, and the privileges required for exploitation are high, with no user interaction required. The attack vector is local, and the impact on integrity and confidentiality is high. The CVSS vector string follows the format: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating the different impacts and characteristics of the vulnerability. No information regarding remediation or potential danger to organizations is provided in the given text.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-20863 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options