CVE-2024-13167 HIGH

CVE-2024-13167

Weakness CWE-787

Published January 14, 2025

Last update January 16, 2025

View on NVD All CVEs

CVSS base score

7.5/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality None

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service.

Key dates

02Disclosure timeline

January 14, 2025 CVE published

January 16, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-13167 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/787.html

Related vulnerabilities

04Related CVE

CVE-2024-45144 Substance3D - Stager | Out-of-bounds Write (CWE-787) CVE-2026-27622 OpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB write CVE-2016-20042 TRN 3.6-23 Stack Buffer Overflow Local Code Execution CVE-2024-30274 Adobe Substance 3D Painter ABC File Parsing An Out-Of-Bounds Write Vulnerability CVE-2021-38684 Buffer Overflow Vulnerability in Multimedia Console