CVE-2024-56192
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Mar 10, 2025
Updated: Mar 11, 2025
CWE ID 281
Summary
CVE-2024-56192 is a newly disclosed vulnerability affecting the wl_notify_gscan_event function in wl_cfgscan.c. This issue involves a missing bounds check, resulting in a possible out-of-bounds write. An attacker can exploit this vulnerability to achieve local privilege escalation, gaining elevated access without requiring any additional execution privileges or user interaction.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.