CVE-2024-20020

In OPTEE, there is a possible out of bounds write due to an incorrect bounds check

Medium · published March 4, 2024

CVSS v3.1
4.4
EPSS
0%
Percentile
1.7
In the wild
Unconfirmed
What it is

In OPTEE, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08522504; Issue ID: ALPS08522504.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00120 · 1.7th percentile
Published
2024-03-04T02:43Z
EPSS history
Timeline
  • 04 MAR 02:43Z
    In OPTEE, there is a possible out of bounds write due to an incorrect bounds check
    cvelistv5