Lucene search

GoogleVULNRICHMENT:CVE-2024-5436

HistoryMay 31, 2024 - 8:11 a.m.

CVE-2024-5436 Type Confusion in Snapchat Lenscore

2024-05-3108:11:34

CWE-704

Google

github.com

cve-2024-5436

type confusion

snapchat lenscore

denial of service

arbitrary code execution

upgrade

7.3 High

CVSS4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

PASSIVE

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:L/SC:L/VI:H/SI:H/VA:H/SA:H

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Type confusion in Snapchat LensCore could lead to denial of service or arbitrary code execution prior to version 12.88. We recommend upgrading to version 12.88 or above.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Snapchat Lenscore",
    "vendor": "Snap",
    "versions": [
      {
        "lessThan": "12.88",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

References

hackerone.com/snapchat