CVE-2024-20118

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09062392; Issue ID: MSV-1621.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-123 CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Nov 4, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-201196.7In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with Syst CVE-2024-20129.8vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or cod CVE-2024-201206.7In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with CVE-2024-201216.7In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with CVE-2024-201224.4In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with Syste CVE-2024-201234.4In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with Syste CVE-2024-201244.4In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with Syste CVE-2024-201256.7In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malici CVE-2024-201277.5In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no addi CVE-2024-201287.5In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no addi CVE-2024-201297.5In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no addi CVE-2024-201310.0An authentication bypass vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway component that if exploited allows attackers withou