CVE-2024-21463
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Apr 1, 2024
Updated: Jan 13, 2025
CWE ID 120
Summary
CVE-2024-21463 is a newly identified vulnerability that affects the v13k decoder pitch synthesis process in Codec2. This issue results in memory corruption, which can be exploited by attackers to execute arbitrary code or cause a denial-of-service condition. Successful exploitation of this vulnerability could lead to serious consequences, including unauthorized system access or data breaches. It is recommended that users update their Codec2 decoder as soon as a patch becomes available to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Qualcomm Incorporated