In wlan driver, there is a possible out of bounds write... · CVE-2024-20072 · GitHub Advisory Database · GitHub

In wlan driver, there is a possible out of bounds write...

Moderate severity Unreviewed Published Jun 3, 2024 to the GitHub Advisory Database • Updated Jul 3, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00364732; Issue ID: MSV-1332.

References

Published by the National Vulnerability Database

Jun 3, 2024

Published to the GitHub Advisory Database Jun 3, 2024

Last updated Jul 3, 2024

Severity

Moderate

6.6

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

High

Privileges required

High

User interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H