CVE-2023-41779 MEDIUM

CVE-2023-41779: Illegal Memory Access Vulnerability of ZTE's ZXCLOUD iRAI

Vendor Zte
Product ZXCLOUD iRAI
Weakness CWE-119
Published January 3, 2024
Last update August 26, 2024
View on NVD All CVEs

CVSS base score

4.4/10
Attack vector Local
Attack complexity High
Privileges required Low
User interaction Required
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

There is an illegal memory access vulnerability of ZTE's ZXCLOUD iRAI product.When the vulnerability is exploited by an attacker with the common user permission, the physical machine will be crashed.

Key dates

02Disclosure timeline

January 3, 2024 CVE published
August 26, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-25585 iccDEV vulnerable to OOB in CIccXform3DLut::Apply() CVE-2026-22167 GPU DDK - Cache resident PM buffers writable by other GPU requestors, leading to arbitrary write to physical memory CVE-2026-24798 An Uninitialized stack variable vulnerability in GaijinEntertainment/DagorEngine CVE-2026-27890 Firebird has Pre-Auth DOS when Processing Out of Order CNCT_specific_data Segments CVE-2026-39892 cryptography has a buffer overflow if non-contiguous buffers were passed to APIs