Lucene search
HistoryJul 02, 2024 - 10:15 a.m.
CVE-2024-20901
improper input validation
libsaped
buffer cache
out-of-bounds memory
local attackers
5.9 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
7 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.2%
Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local attackers to write out-of-bounds memory.
CNA Affected
[
{
"vendor": "Samsung Mobile",
"product": "Samsung Mobile Devices",
"versions": [
{
"status": "unaffected",
"version": "SMR Jul-2024 Release in Android 12, 13, 14"
}
],
"defaultStatus": "affected"
}
]Related
nvd
nvd
CVE-2024-20901
2024-07-02 10:15:05
vulnrichment
vulnrichment
CVE-2024-20901
2024-07-02 09:20:53
cvelist
cvelist
CVE-2024-20901
2024-07-02 09:20:53
5.9 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
7 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.2%
Related for CVE-2024-20901