CVE-2024-20003

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC Connection Setup message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01191612; Issue ID: MOLY01191612 (MSV-981).

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Feb 5, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-200047.5In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent CVE-2024-200058.2In da, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with SystemCVE-2024-200066.7In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System eCVE-2024-200077.5In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to remote escalation of privilege with no aCVE-2024-200098.8In alac decoder, there is a possible out of bounds write due to an incorrect error handling. This could lead to remote escalation of privileCVE-2024-20015.4A Cross-Site Scripting vulnerability in Cockpit CMS affecting version 2.7.0. This vulnerability could allow an authenticated user to upload CVE-2024-200106.7In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with SystCVE-2024-200119.8In alac decoder, there is a possible information disclosure due to an incorrect bounds check. This could lead to remote code execution with CVE-2024-200126.7In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with SystCVE-2024-200136.7In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with CVE-2024-200157.8In telephony, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege withCVE-2024-200164.4In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local denial of service with System execution