Skip to content
OpenAdvisories
High · 7.5 CVE-2024-42420 EUVD-2024-39614GHSA-25xc-32vr-fm66

Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of keyword search input and impr…

Published Oct 25, 2024 · Updated Oct 25, 2024 · Assigned by jpcert

Description

Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of keyword search input and improper processing of SOAP messages.
Crafted HTTP requests may cause affected products crashed.

Affected products

VendorProductAffectedFixed
Sharp Sharp Digital Full-color MFPs and Monochrome MFPs see the information provided by Sharp Corporation. —
Toshiba Tec e-STUDIO 908 T2.12.h3.00 and earlier versions —
Toshiba Tec e-STUDIO 1058 T1.01.h4.00 and earlier versions —
Toshiba Tec e-STUDIO 1208 T1.01.h4.00 and earlier versions —

References