Lucene search

K
nvd[email protected]NVD:CVE-2024-20836
HistoryMar 05, 2024 - 5:15 a.m.

CVE-2024-20836

2024-03-0505:15:10
web.nvd.nist.gov
2
vulnerability
out of bounds
memory
local
attackers
ssmis_get_frm
libsubextractor.so

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

AI Score

3.7

Confidence

High

EPSS

0

Percentile

9.0%

Out of bounds Read vulnerability in ssmis_get_frm in libsubextractor.so prior to SMR Mar-2024 Release 1 allows local attackers to read out of bounds memory.

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

AI Score

3.7

Confidence

High

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2024-20836