CVE-2024-46939 LOW

CVE-2024-46939: Game Extension Engine Path Traversal Vulnerability

Vendor Vivo

Product Game Extension Engine

Weakness CWE-22 · Path traversal

Published November 28, 2024

Last update December 2, 2024

View on NVD All CVEs

CVSS base score

2.4/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction —

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/AU:N/R:A/V:D

What the vulnerability does

01Description

The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameters to perform path traversal attacks, which can overwrite local specific files

Key dates

02Disclosure timeline

November 28, 2024 CVE published

December 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-46939 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/22.html

Related vulnerabilities

CVE-2024-46939: Game Extension Engine Path Traversal Vulnerability

01Description

02Disclosure timeline

03References

04Related CVE