What is the CVSS score of CVE-2026-24873?

CVE-2026-24873 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Rinnegatamante are affected by CVE-2026-24873?

CVE-2026-24873 is a high-severity out-of-bounds read vulnerability affecting lpp-vita (a PlayStation Vita development library) that could allow attackers to read sensitive memory and potentially…

How to fix or mitigate CVE-2026-24873?

Within 24 hours: Identify all systems and applications using lpp-vita and isolate affected development/production environments from untrusted networks. Within 7 days: Conduct an inventory audit of lpp-vita versions in use and document systems running versions before r6; implement enhanced monitoring for suspicious memory access patterns. Within 30 days: Establish a process to immediately apply the vendor patch when released; evaluate alternative libraries or sandboxing solutions if lpp-vita remains critical to operations.

Rinnegatamante CVE-2026-24873

HIGH

Out-of-bounds Read (CWE-125)

2026-01-27 cve_disclosure@tech.gov.sg

Buffer Overflow Information Disclosure

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Jan 27, 2026 - 16:16 nvd

HIGH 7.8

DescriptionCVE.org

Out-of-bounds Read vulnerability in Rinnegatamante lpp-vita.This issue affects lpp-vita: before lpp-vita r6.

AnalysisAI

Out-of-bounds memory read in Rinnegatamante lpp-vita before version r6 allows local attackers with user interaction to read sensitive data, modify memory, or crash the application. The vulnerability requires local access and user interaction to trigger, affecting the integrity and confidentiality of affected systems. No patch is currently available.

Technical ContextAI

Classified as CWE-125 (Out-of-bounds Read). Out-of-bounds Read vulnerability in Rinnegatamante lpp-vita.This issue affects lpp-vita: before lpp-vita r6.