CVE-2024-20082
CVE-2024-20082
In short
A modem firmware lacks proper validation when processing certain data, allowing attackers to overwrite memory and execute malicious code remotely without any special access or user action required.
Technical detail
A bounds check vulnerability in modem firmware enables remote memory corruption (CWE-119) via network-based input vectors. The absence of buffer validation allows arbitrary code execution in kernel context without requiring elevated privileges or user interaction, presenting immediate remote exploitation risk.
Summary generated and translated by AI from the official description.
In Modem, there is a possible memory corruption due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01182594; Issue ID: MSV-1529.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →