Vulnerability Database

317,577

Total vulnerabilities in the database

CVE-2024-20009

In alac decoder, there is a possible out of bounds write due to an incorrect error handling. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441150; Issue ID: ALPS08441150.

  • Published: Feb 5, 2024
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-20009
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.8
  • AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
google / android 12.0 12.0.x
google / android 13.0 13.0.x
google / android 14.0 14.0.x