CVE-2024-5436

CRITICAL

9.8

Description

Type confusion in Snapchat LensCore could lead to denial of service or arbitrary code execution prior to version 12.88. We recommend upgrading to version 12.88 or above.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published5/31/2024

Last Modified7/22/2025

Sourcenvd

Honeypot Sightings0

Affected Products

snap:snapchat_lenscore

Weaknesses (CWE)

CWE-704CWE-843

References

https://hackerone.com/snapchat(cve-coordination@google.com)

https://hackerone.com/snapchat(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.