CVE-2024-5436 HIGH

CVE-2024-5436: Type Confusion in Snapchat Lenscore

Vendor Snap
Product Snapchat Lenscore
Weakness CWE-704
Published May 31, 2024
Last update August 1, 2024
View on NVD All CVEs

CVSS base score

7.3/10
Attack vector Network
Attack complexity High
Privileges required Low
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H

What the vulnerability does

01Description

Type confusion in Snapchat LensCore could lead to denial of service or arbitrary code execution prior to version 12.88. We recommend upgrading to version 12.88 or above.

Key dates

02Disclosure timeline

May 31, 2024 CVE published
August 1, 2024 Record updated