CVE-2024-42420 HIGH

CVE-2024-42420

Vendor Sharp Corporation
Product Sharp Digital Full-color MFPs and Monochrome MFPs
Weakness CWE-125
Published October 25, 2024
Last update October 25, 2024
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of keyword search input and improper processing of SOAP messages. Crafted HTTP requests may cause affected products crashed.

Key dates

02Disclosure timeline

October 25, 2024 CVE published
October 25, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-54592 Oj: Stack Buffer Overflow in Oj::Doc#each_child via Deeply Nested Input CVE-2021-36016 Adobe Media Encoder FLV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability CVE-2023-29319 [FG-VD-23-010] Adobe InDesign 2023 Out-of-Bound Read Vulnerability VII Notification CVE-2023-37356 Kofax Power PDF GIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability CVE-2024-23153 Multiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products