CVE-2024-20124CWE-125

In vdec, there is a possible out of bounds read due to improper structure design

Medium · published November 4, 2024

CVSS v3.1
4.4
EPSS
0%
Percentile
0.1
In the wild
Unconfirmed
What it is

In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1568.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00078 · 0.1th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2024-11-04T01:49Z
EPSS history
Timeline
  • 04 NOV 01:49Z
    In vdec, there is a possible out of bounds read due to improper structure design
    cvelistv5