PT-2024-18787
CVE-2024-20876
·
Published
2024-06-03
·
Updated
2024-06-04
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
libsheifdecadapter.so versions prior to SMR Jun-2024 Release 1
Description
The issue is related to improper input validation in libsheifdecadapter.so, which can lead to memory corruption when exploited by local attackers.
Recommendations
For versions prior to SMR Jun-2024 Release 1, update to SMR Jun-2024 Release 1 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾