CVE-2024-39437

CVSS 3.1 Score 6.7 of 10 (medium)

Details

Published Oct 9, 2024

Updated: Oct 17, 2024

CWE ID 77

Summary

CVE-2024-39437 is a newly disclosed vulnerability affecting the linkturbonative service. The issue stems from insufficient input validation, which creates an opportunity for attackers to inject commands. Successful exploitation of this vulnerability could enable the attacker to escalate privileges locally, requiring System execution privileges. This weakness poses a significant risk to the targeted system, necessitating immediate attention and patches from service providers and users.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Android

Affected Vendors

Google

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/wpJOlT
https://www.cve.org/CVERecord?id=CVE-2024-39437
https://nvd.nist.gov/vuln/detail/CVE-2024-39437

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

Russia-Aligned TAG-110 Targets Tajikistan with Macro-Enabled Word Documents

Measuring the US-China AI Gap

TerraStealerV2 and TerraLogger: Golden Chickens' New Malware Families Discovered

Know What Matters

For Customers

For Partners