CVE-2024-51979: Authenticated stack based buffer overflow affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, and Konica Minolta, Inc.

Vulnerability summary

CVE-2024-51979 is a high (CVSS 7.2) Stack-based Buffer Overflow vulnerability in brother industries, ltd ads-2400n. EPSS estimates a 1.15% chance of exploitation in the next 30 days, higher than 66.6% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 25-06-2025
   PublishedVulnerability first disclosed.
2. 07-04-2026
   Last modifiedVulnerability information updated.

Description

An authenticated attacker may trigger a stack based buffer overflow by performing a malformed request to either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631). The malformed request will contain an empty Origin header value and a malformed Referer header value. The Referer header value will trigger a stack based buffer overflow when the host value in the Referer header is processed and is greater than 64 bytes in length.

• CWE-121Stack-based Buffer OverflowA stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).