CVE-2024-20009

In alac decoder, there is a possible out of bounds write due to an incorrect error handling

High · published February 5, 2024

CVSS v3.1
8.8
EPSS
0%
Percentile
30.0
In the wild
Unconfirmed
What it is

In alac decoder, there is a possible out of bounds write due to an incorrect error handling. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441150; Issue ID: ALPS08441150.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00373 · 30.0th percentile
Published
2024-02-05T05:59Z
EPSS history
Timeline
  • 05 FEB 05:59Z
    In alac decoder, there is a possible out of bounds write due to an incorrect error handling
    cvelistv5