CVE-2024-40671
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Nov 13, 2024
Updated: Nov 15, 2024
CWE ID 94
Summary
CVE-2024-40671 is a newly discovered vulnerability affecting the Devicemem server. In the function DevmemIntChangeSparse2 of devicemem_server.c, a missing permission check allows an attacker to execute arbitrary code, resulting in local privilege escalation. This vulnerability can be exploited without any additional execution privileges or user interaction.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.