CVE-2024-20118CWE-123
In mms, there is a possible out of bounds write due to an incorrect bounds check
Medium · published November 4, 2024
What it is
In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09062392; Issue ID: MSV-1621.
The record
Technical detail
- CVSS v3.1
- 6.7 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00079 · 0.1th percentile
- Weakness
- CWE-123 · Write-what-where Condition
- Published
- 2024-11-04T01:49Z
EPSS history
Timeline