CVE-2024-23615 CRITICAL

CVE-2024-23615: Symantec Messaging Gateway Buffer Overflow

Vendor Symantec

Product Messaging Gateway

Weakness CWE-119

Published January 25, 2024

Last update May 29, 2025

View on NVD All CVEs

CVSS base score

10.0/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 10.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as root.

Key dates

02Disclosure timeline

January 25, 2024 CVE published

May 29, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-23615 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/119.html

Related vulnerabilities

04Related CVE

CVE-2025-7307 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability CVE-2022-3974 Axiomatic Bento4 mp4info Ap4StdCFileByteStream.cpp ReadPartial heap-based overflow CVE-2022-3625 Linux Kernel IPsec devlink.c devlink_param_get use after free CVE-2026-33851 Improper Restriction of Operations within the Bounds of a Memory Buffer in joncampbell123 doslib CVE-2022-42775