CVE-2024-20009
published 2024-02-05CVE-2024-20009: In alac decoder, there is a possible out of bounds write due to an incorrect error handling. This could lead to remote escalation of privilege with no…
PriorityP348high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
0.38%
30.0th percentile
In alac decoder, there is a possible out of bounds write due to an incorrect error handling. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441150; Issue ID: ALPS08441150.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2024-20009: alac decoder
vendor_android·2024-02-01·CVSS 8.8
CVE-2024-20009 [HIGH] CVE-2024-20009: alac decoder
Android Security Bulletin 2024-02-01
CVE: CVE-2024-20009
Severity: HIGH
Component: alac decoder
References: A-314698313
M-ALPS08441150
*
GHSA
GHSA-2rwq-3mr3-vq32: In alac decoder, there is a possible out of bounds write due to an incorrect error handling
ghsa_unreviewed·2024-02-05
CVE-2024-20009 [HIGH] CWE-787 GHSA-2rwq-3mr3-vq32: In alac decoder, there is a possible out of bounds write due to an incorrect error handling
In alac decoder, there is a possible out of bounds write due to an incorrect error handling. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441150; Issue ID: ALPS08441150.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-02-05
Published