PT-2024-18784
CVE-2024-20873
·
Published
2024-06-03
·
Updated
2024-06-04
Description by
CVSS 3.1
6.0
MediumMetricsAV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions
caminfo driver versions prior to SMR Jun-2024 Release 1
Description
The issue is related to improper input validation in the caminfo driver, allowing local privileged attackers to write out-of-bounds memory. This can be exploited by local privileged attackers.
Recommendations
For versions prior to SMR Jun-2024 Release 1, update to SMR Jun-2024 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the caminfo driver to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾