In atf spm, there is a possible way to remap physical memory to virtual memory due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08584568; Issue ID: MSV-1249.
Search vulnerabilities
CVE-2024-20021
CVSS 3.1 · 6.7 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2024-20024
In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541635; Issue ID: ALPS08541635.
CVSS 3.1 · 6.0 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2024-20005
In da, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08355599; Issue ID: ALPS08355599.
CVSS 3.1 · 8.2 High
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.