CVE-2024-20039

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

In modem protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01240012; Issue ID: MSV-1215.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Apr 1, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-20043.5When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the aCVE-2024-200408.8In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilegCVE-2024-200414.4In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System exeCVE-2024-200426.6In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System eCVE-2024-200436.6In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System eCVE-2024-200446.6In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System eCVE-2024-200452.3In audio, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information discloCVE-2024-200466.6In battery, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege with SyCVE-2024-200475.4In battery, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System eCVE-2024-200486.2In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with SysCVE-2024-200494.4In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with SysCVE-2024-20058.0In Blue Planet® products through 22.12, a misconfiguration in the SAML implementation allows for privilege escalation. Only products using
CVE-2024-20039: High severity, CVSS 8.8 | Vulnix