CVE-2024-46939: Game Extension Engine Path Traversal Vulnerability
2.4
CVSS
Description
The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameters to perform path traversal attacks, which can overwrite local specific files
Classification
CVE ID: CVE-2024-46939
CVSS Base Severity: LOW
CVSS Base Score: 2.4
Affected Products
Vendor: vivo
Product: Game Extension Engine
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 12.62% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)