Lucene search
+L

7762 matches found

OSV
OSV
added 2024/02/05 6:15 a.m.9 views

CVE-2024-20007

In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441369; Issue ID: ALPS08441369...

7.5CVSS5.9AI score0.00252EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/05 6:15 a.m.23 views

CVE-2024-20007

In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441369; Issue ID: ALPS08441369...

7.5CVSS7.8AI score0.00252EPSS
SaveExploits0References1
OSV
OSV
added 2024/02/05 6:15 a.m.13 views

CVE-2024-20011

In alac decoder, there is a possible information disclosure due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08441146; Issue ID: ALPS08441146...

9.8CVSS6.3AI score0.00446EPSS
SaveExploits0References1
OSV
OSV
added 2024/02/05 6:15 a.m.10 views

CVE-2024-20009

In alac decoder, there is a possible out of bounds write due to an incorrect error handling. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441150; Issue ID: ALPS08441150...

8.8CVSS5.9AI score0.00373EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/05 6:15 a.m.29 views

CVE-2024-20009

In alac decoder, there is a possible out of bounds write due to an incorrect error handling. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441150; Issue ID: ALPS08441150...

8.8CVSS8.8AI score0.00373EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/05 6:15 a.m.31 views

CVE-2024-20011

In alac decoder, there is a possible information disclosure due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08441146; Issue ID: ALPS08441146...

9.8CVSS8.7AI score0.00446EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/05 6:15 a.m.33 views

Out-of-bounds

In alac decoder, there is a possible out of bounds write due to an incorrect error handling. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441150; Issue ID: ALPS08441150...

6.8CVSS7.7AI score0.00373EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2024/02/05 6:15 a.m.36 views

Information disclosure

In alac decoder, there is a possible information disclosure due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08441146; Issue ID: ALPS08441146...

7.5CVSS7.6AI score0.00446EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2024/02/05 6:15 a.m.24 views

Race condition

In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441369; Issue ID: ALPS08441369...

5.1CVSS7.7AI score0.00252EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/05 5:59 a.m.2 views

CVE-2024-20011

In alac decoder, there is a possible information disclosure due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08441146; Issue ID: ALPS08441146...

8.9AI score0.00446EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/02/05 5:59 a.m.8 views

CVE-2024-20009

In alac decoder, there is a possible out of bounds write due to an incorrect error handling. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441150; Issue ID: ALPS08441150...

8.8AI score0.00373EPSS
SaveExploits0References1
CVE
CVE
added 2024/02/05 5:59 a.m.114 views

CVE-2024-20009

CVE-2024-20009 concerns MediaTek’s alac decoder where an out-of-bounds write can occur due to incorrect error handling. The vulnerability could enable remote escalation of privilege with no additional execution privileges required, and exploitation requires user interaction. The issue is document...

8.8CVSS8.6AI score0.00373EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/02/05 5:59 a.m.40 views

CVE-2024-20009

In alac decoder, there is a possible out of bounds write due to an incorrect error handling. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441150; Issue ID: ALPS08441150...

8.9AI score0.00373EPSS
SaveExploits0References1
CVE
CVE
added 2024/02/05 5:59 a.m.163 views

CVE-2024-20007

CVE-2024-20007 affects MediaTek MP3 decoder: a race condition could trigger an out-of-bounds write, enabling remote escalation of privileges with user interaction required. Public details confirm the mp3 decoder component and patch ALPS08441369; exploitation status is not provided in the sources....

7.5CVSS7.8AI score0.00252EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/05 5:59 a.m.7 views

CVE-2024-20007

In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441369; Issue ID: ALPS08441369...

7.8AI score0.00252EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/02/05 5:59 a.m.39 views

CVE-2024-20007

In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441369; Issue ID: ALPS08441369...

8AI score0.00252EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/02/05 12:00 a.m.11 views

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips due to incorrect error handling in the alac decoder module, which may result in out-of-bounds writes...

8.8CVSS6.8AI score0.00373EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/02/05 12:00 a.m.12 views

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips that stems from a race condition in the mp3 decoder module that may result in out-of-bounds writes...

7.5CVSS6.8AI score0.00252EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/02/05 12:00 a.m.10 views

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips that stems from an incorrect boundary check in the alac decoder module, which could lead to information disclosure...

9.8CVSS6.5AI score0.00446EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/02/04 12:00 a.m.11 views

PT-2024-18495 · Unknown · Mp3 Decoder

Name of the Vulnerable Software and Affected Versions: mp3 decoder affected versions not specified Description: The issue is related to a possible out of bounds write due to a race condition in the mp3 decoder. This could lead to remote escalation of privilege with no additional execution...

7.5CVSS7.6AI score0.00252EPSS
SaveExploits0References4
Rows per page
Query Builder