CVE-2024-45829: sharp corporation sharp digital full-color mfps and monochrome mfps Out-of-bounds Read
Vulnerability summary
CVE-2024-45829 is a high (CVSS 7.5) Out-of-bounds Read vulnerability in sharp corporation sharp digital full-color mfps and monochrome mfps. EPSS estimates a 0.71% chance of exploitation in the next 30 days, higher than 52.6% of scored vulnerabilities.
Timeline
- 25-10-2024PublishedVulnerability first disclosed.
- 25-10-2024Last modifiedVulnerability information updated.
Description
Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are improperly processed and resulting in an Out-of-bounds Read vulnerability. Crafted HTTP requests may cause affected products crashed.
CVSS metrics
2 scores · 2 sources · 1 version- CVE.orgCNA4.9MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HDiffers
EPSS trend
Probability
0.71%
Chance of exploitation in the next 30 days
Percentile
53%
Versus all other CVEs
30-day change
0.00 pp
From 0.71% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Sharp199 products
Sharp corporation1 product
- sharp digital full-color mfps and monochrome mfpssee the information provided by Sharp Corporation
2 vendors · 200 products · Showing 200 of 324. Use Open JSON for the complete list.
References
3 links- jvn.jp/en/vu/JVNVU95063136/Third Party Advisory
- global.sharp/products/copier/info/info_security_2024-10.htmlVendor Advisory
- www.toshibatec.com/information/20241025_01.htmlVendor Advisory