Remote Code Execution Vulnerability in librtp.so Prior to SMR Jul-2024 Release 1

CVE-2024-34593

8.8HIGH

Key Information

Vendor: librtp.so
Status: Android
Vendor: CVE Published:; 2 July 2024

Summary

Improper input validation in parsing and distributing RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.

CVSS V3.1

Score:

8.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Timeline

Vulnerability published.
Jul 2, 2024

Collectors

NVD Database