CVE-2024-45829 MEDIUM

CVE-2024-45829

Vendor Sharp Corporation
Product Sharp Digital Full-color MFPs and Monochrome MFPs
Weakness CWE-125
Published October 25, 2024
Last update October 25, 2024
View on NVD All CVEs

CVSS base score

4.9/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are improperly processed and resulting in an Out-of-bounds Read vulnerability. Crafted HTTP requests may cause affected products crashed.

Key dates

02Disclosure timeline

October 25, 2024 CVE published
October 25, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-7002 Avira antivirus engine heap buffer OOB read when scanning a malformed PDF file (variant 2) CVE-2026-45258 Multiple vulnerabilities in the sound(4) mmap path CVE-2026-56361 ImageMagick - Heap Buffer Overflow via Off-by-One in Morphology Processing CVE-2026-53704 Gstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer fileinfo metadata parser CVE-2026-58011 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime