CVE-2020-24162

HIGH

Shenzhen Tencent app <5.8.2.5300 - Code Injection

Title source: llm
STIX 2.1

Description

The Shenzhen Tencent app 5.8.2.5300 for PC platforms (from Tencent App Center) has a DLL hijacking vulnerability. Attackers can use this vulnerability to execute malicious code.

References (1)

Core 1
Core References
Third Party Advisory x_refsource_misc
https://www.cnvd.org.cn/flaw/show/2105399

Scores

CVSS v3 7.8
EPSS 0.0040
EPSS Percentile 32.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-427
Status published
Products (1)
tencent/tencent 5.8.2.5300
Published Sep 03, 2020
Tracked Since Feb 18, 2026