Skip to content
OpenAdvisories
Critical · 9.5 CVE-2024-7490 EUVD-2024-48404GHSA-m5xv-fggp-4j5r

Remote Code Execution in Advanced Software Framework DHCP server

Published Aug 8, 2024 · Updated Aug 29, 2025 · Assigned by Microchip

Description

Improper Input Validation vulnerability in Microchip Techology Advanced Software Framework example DHCP server can cause remote code execution through a buffer overflow.
This vulnerability is associated with program files tinydhcpserver.C and program routines lwip_dhcp_find_option.

This issue affects Advanced Software Framework: through 3.52.0.2574.

ASF is no longer being supported. Apply provided workaround or migrate to an actively maintained framework.

Affected products

VendorProductAffectedFixed
Microchip Techology Advanced Software Framework ≤ 3.52.0.2574 —

References