CVE-2024-20863
published 2024-05-07CVE-2024-20863: Out of bounds write vulnerability in SNAP in HAL prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code.
PriorityP431medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
EPSS
0.19%
9.0th percentile
Out of bounds write vulnerability in SNAP in HAL prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| samsung | android | — | — |
| samsung | android | — | — |
| samsung | android | — | — |
CVSS provenance
nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
vendor_oracle6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-x6px-gcfp-pfxj: Out of bounds write vulnerability in SNAP in HAL prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code
ghsa_unreviewed·2024-05-07
CVE-2024-20863 [MEDIUM] CWE-787 GHSA-x6px-gcfp-pfxj: Out of bounds write vulnerability in SNAP in HAL prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code
Out of bounds write vulnerability in SNAP in HAL prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code.
Oracle
Oracle Oracle Commerce Risk Matrix: Endeca Application Controller (Spring Framework) — CVE-2023-20863
vendor_oracle·2024-10-15·CVSS 6.5
CVE-2023-20863 [MEDIUM] Oracle Oracle Commerce Risk Matrix: Endeca Application Controller (Spring Framework) — CVE-2023-20863
Oracle Oracle Commerce Risk Matrix: Endeca Application Controller (Spring Framework) vulnerability
CVE: CVE-2023-20863
CVSS: 6.5
Protocol: HTTP
Remote exploit: No
Affected versions: Network
Advisory: cpuoct2024 (OCT 2024)
Oracle
Oracle Oracle Commerce Risk Matrix: Platform (Spring Framework) — CVE-2023-20863
vendor_oracle·2024-04-15·CVSS 6.5
CVE-2023-20863 [MEDIUM] Oracle Oracle Commerce Risk Matrix: Platform (Spring Framework) — CVE-2023-20863
Oracle Oracle Commerce Risk Matrix: Platform (Spring Framework) vulnerability
CVE: CVE-2023-20863
CVSS: 6.5
Protocol: HTTP
Remote exploit: No
Affected versions: Network
Advisory: cpuapr2024 (APR 2024)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-05-07
Published