High · 7.5 CVE-2024-43424 EUVD-2024-40277GHSA-x2hx-6q2f-fjrr

Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnerability. Crafted HTTP requests…

Published Oct 25, 2024 · Updated Oct 25, 2024 · Assigned by jpcert

Vendor: Sharp Vendor: Toshiba Tec Product: e-STUDIO 1058 Product: e-STUDIO 1208 Product: e-STUDIO 908 Product: Sharp Digital Full-color MFPs and Monochrome MFPs

Description

Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnerability.
Crafted HTTP requests may cause affected products crashed.

Affected products

Vendor	Product	Affected	Fixed
Sharp	Sharp Digital Full-color MFPs and Monochrome MFPs	see the information provided by Sharp Corporation	—
Toshiba Tec	e-STUDIO 908	T2.12.h3.00 and earlier versions	—
Toshiba Tec	e-STUDIO 1058	T1.01.h4.00 and earlier versions	—
Toshiba Tec	e-STUDIO 1208	T1.01.h4.00 and earlier versions	—

References

https://jvn.jp/en/vu/JVNVU95063136/
https://global.sharp/products/copier/info/info_security_2024-10.html
https://www.toshibatec.com/information/20241025_01.html