CVE-2024-47032
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Jan 3, 2025
CWE ID 120
Summary
CVE-2024-47032 is a newly disclosed vulnerability affecting an unspecified component. The issue lies in the "construct_transaction_from_cmd" function of "lwis_ioctl.c" file. This vulnerability results in a heap buffer overflow, which can be exploited to carry out a local privilege escalation. Notably, user interaction is not required for successful exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.