CVE-2024-20037

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In pq, there is a possible write-what-where condition due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08495937; Issue ID: ALPS08495937.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-754

Affected software

No affected versions have been published.

Timeline

Published
Mar 4, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-200383.4In pq, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System CVE-2024-200398.8In modem protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no aCVE-2024-20043.5When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the aCVE-2024-200408.8In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilegCVE-2024-200414.4In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System exeCVE-2024-200426.6In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System eCVE-2024-200436.6In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System eCVE-2024-200446.6In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System eCVE-2024-200452.3In audio, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information discloCVE-2024-200466.6In battery, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege with SyCVE-2024-200475.4In battery, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System eCVE-2024-200486.2In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with Sys
CVE-2024-20037: Medium severity, CVSS 6.7 | Vulnix