CVE-2024-45550

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Jan 6, 2025
Updated: Jan 13, 2025
CWE ID 129

Summary

CVE-2024-45550 is a newly disclosed cybersecurity vulnerability affecting the MCDM (Multimedia Class Driver Model) driver. The issue arises when any IOCTL-calling application processes all MCDM driver IOCTL calls, leading to memory corruption. This vulnerability can potentially be exploited by malicious actors to execute arbitrary code or cause system crashes. Successful exploitation may result in data loss, unauthorized access, or other serious consequences. Users are advised to apply patches or updates to affected systems as soon as they become available to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share