CVE-2024-20817
Assigner: SamsungMobile
Published: 2024-02-06T02:23:08.182Z
State: PUBLISHED
problemTypes: descriptions: description: CWE-787: Out-of-bounds Write
affected: vendor: Samsung Mobile
product: Samsung Mobile Devices
versions: status: unaffected
version: SMR Feb-2024 Release in Android 11, 12, 13, 14
defaultStatus: affected
descriptions: value: Out-of-bounds Write vulnerabilities in svc1td_vld_slh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow.
metrics: format: CVSS
cvssV3_1: version: 3.1
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: HIGH
availabilityImpact: LOW
baseSeverity: MEDIUM
baseScore: 6.6
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L