CVE-2023-24855CWE-823

Use of Out-of-range Pointer Offset in Modem

Critical · published October 3, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
45.1
In the wild
Unconfirmed
What it is

🔥 A memory corruption issue in Modem software could leave devices gasping for breath! Think of this like a factory assembly line that suddenly misplaces crucial parts during a safety check — without the right components, the entire line can falter, causing chaos. The consequences could be absolutely devastating! An attacker could exploit this flaw to disrupt services, potentially leading to device malfunctions or crashes — imagine your smartphone suddenly becoming a brick! With a staggering CVSS score of 9.8, this is no picnic.

Put simply

Think of this like a factory assembly line that suddenly misplaces crucial parts during a safety check — without the right components, the entire line can falter, causing chaos. CVE-2023-24855 relates to memory corruption occurring while the Modem processes security-related configurations during the AS Security Exchange, which can result in unauthorized access or control.

What to do

The consequences could be absolutely devastating! An attacker could exploit this flaw to disrupt services, potentially leading to device malfunctions or crashes — imagine your smartphone suddenly becoming a brick! With a staggering CVSS score of 9.8, this is no picnic. Immediately check for updates from your device or software provider and ensure you’re running the latest version. If you're in a development environment, review your configurations and apply necessary patches as soon as they are available! You’ve got this! With a little vigilance and these steps, you can keep your devices secure! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00546 · 45.1th percentile
Weakness
CWE-823 · Use of Out-of-range Pointer Offset
Published
2023-10-03T05:00Z
EPSS history
Timeline
  • 03 OCT 05:00Z
    Use of Out-of-range Pointer Offset in Modem
    cvelistv5