CVE-2018-9424

Summary

CVE-2018-9424 is a vulnerability affecting the CryptoPlugin component in CryptoPlugin.cpp. The issue involves a missing bounds check in the CryptoPlugin::decrypt function, potentially allowing for an out-of-bounds write. This vulnerability could result in local privilege escalation without requiring additional execution privileges, and user interaction is not necessary for exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.