CVE-2024-20357 | Cisco IP Phone 6800/IP Phone 7800/IP Phone 8800 up to 12.0.4 XML out-of-bounds write (cisco-sa-ipphone-multi-vulns-cXAhCvS)

A vulnerability, which was classified as critical, has been found in Cisco IP Phone 6800, IP Phone 7800 and IP Phone 8800. Affected by this issue is some unknown functionality of the component XML Handler. The manipulation leads to out-of-bounds write.

This vulnerability is handled as CVE-2024-20357. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.