CVE-2024-38407CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

High · published November 4, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
0.1
In the wild
Unconfirmed
What it is

Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00075 · 0.1th percentile
Weakness
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition
Published
2024-11-04T10:04Z
EPSS history
Timeline
  • 04 NOV 10:04Z
    Time-of-check Time-of-use (TOCTOU) Race Condition in Camera
    cvelistv5