Lucene search

K
nvd[email protected]NVD:CVE-2024-20876
HistoryJun 04, 2024 - 7:15 a.m.

CVE-2024-20876

2024-06-0407:15:44
web.nvd.nist.gov
input validation
memory corruption
libsheifdecadapter.so
local attackers
smr jun-2024 release 1

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

EPSS

0

Percentile

9.0%

Improper input validation in libsheifdecadapter.so prior to SMR Jun-2024 Release 1 allows local attackers to lead to memory corruption.

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2024-20876