CVE-2024-40763 - AskarLabs CVE Database

CVE-2024-40763

Vendor Sonicwall

Product SMA100

Weakness CWE-122

Published December 5, 2024

Last update December 7, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy. This allows remote authenticated attackers to cause Heap-based buffer overflow and potentially lead to code execution.

Key dates

02Disclosure timeline

December 5, 2024 CVE published

December 7, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-40763 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/122.html

Related vulnerabilities

04Related CVE

CVE-2026-42993 Remote Desktop Client Remote Code Execution Vulnerability CVE-2026-14385 CVE-2026-48994 ImageMagick: Heap Buffer Over-Write in MAT decoder on 32-bit systems CVE-2026-12912 Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image CVE-2026-45542 ESF-IDF: Heap buffer overflow in protocomm Security2 over Bluetooth