CVEvulnerability
CVE-2024-51979
7.2 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2025-06-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-121
Description
An authenticated attacker may trigger a stack based buffer overflow by performing a malformed request to either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631). The malformed request will contain an empty Origin header value and a malformed Referer header value. The Referer header value will trigger a stack based buffer overflow when the host value in the Referer header is processed and is greater than 64 bytes in length.
Related
Weakness · CWE (1)
- CWE-121 Stack-based Buffer Overflow weakness
References
- https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf assets.contentstack.io
- https://github.com/sfewer-r7/BrotherVulnerabilities github.com
- https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000 support.brother.com
- https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100848_000 support.brother.com
- https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faqp00100620_000 support.brother.com
- https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0625_announce.html www.fujifilm.com
- https://www.konicaminolta.com/global-en/security/advisory/pdf/km-2025-0001.pdf www.konicaminolta.com
- https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed www.rapid7.com
- https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000007 www.ricoh.com
- https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf assets.contentstack.io