CVE-2024-5436

7.3 highEPSS 0.5%

High (7.3) in snap snapchat lenscore. EPSS 0.5% chance of exploitation in the next 30 days.

Type confusion in Snapchat LensCore could lead to denial of service or arbitrary code execution prior to version 12.88. We recommend upgrading to version 12.88 or above.

Severity

CVSS 4.0

7.3 high

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
CWEs: CWE-843, CWE-704
Published: 2024-05-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

snap:snapchat_lenscore

References

https://hackerone.com/snapchat
https://hackerone.com/snapchat

Check your stack JSON