CVE Feed

    Dashboard / CVE / CVE-2024-36254

    CVE-2024-36254

    Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs (multifunction printers), which may lead to a denial-of-service (DoS) condition.

    Published:Nov 26, 2024
    Last Modified:Apr 15, 2026
    EPS:Nov 26, 2024
    EPSS Score:0.00159
    CVSS Score:7.5

    Affected Products

    Vendor
    Sharp
    Product
    Bp-30c25
    Vendor
    Sharp
    Product
    Bp-30c25t
    Vendor
    Sharp
    Product
    Bp-30c25y
    Vendor
    Sharp
    Product
    Bp-30c25z
    Vendor
    Sharp
    Product
    Bp-50c26
    Vendor
    Sharp
    Product
    Bp-50c31
    Vendor
    Sharp
    Product
    Bp-50c36
    Vendor
    Sharp
    Product
    Bp-50c45
    Vendor
    Sharp
    Product
    Bp-50c55
    Vendor
    Sharp
    Product
    Bp-50c65
    Vendor
    Sharp
    Product
    Bp-55c26
    Vendor
    Sharp
    Product
    Bp-60c31
    Vendor
    Sharp
    Product
    Bp-60c36
    Vendor
    Sharp
    Product
    Bp-60c45
    Vendor
    Sharp
    Product
    Bp-70c31
    Vendor
    Sharp
    Product
    Bp-70c36
    Vendor
    Sharp
    Product
    Bp-70c45
    Vendor
    Sharp
    Product
    Bp-70c55
    Vendor
    Sharp
    Product
    Bp-70c65
    Vendor
    Sharp
    Product
    Bp-90c70
    Vendor
    Sharp
    Product
    Bp-90c80
    Vendor
    Sharp
    Product
    Mx-2651
    Vendor
    Sharp
    Product
    Mx-3051
    Vendor
    Sharp
    Product
    Mx-3061
    Vendor
    Sharp
    Product
    Mx-3061s
    Vendor
    Sharp
    Product
    Mx-3071
    Vendor
    Sharp
    Product
    Mx-3071s
    Vendor
    Sharp
    Product
    Mx-3551
    Vendor
    Sharp
    Product
    Mx-3561
    Vendor
    Sharp
    Product
    Mx-3561s
    Vendor
    Sharp
    Product
    Mx-3571
    Vendor
    Sharp
    Product
    Mx-3571s
    Vendor
    Sharp
    Product
    Mx-4051
    Vendor
    Sharp
    Product
    Mx-4061
    Vendor
    Sharp
    Product
    Mx-4061s
    Vendor
    Sharp
    Product
    Mx-4071
    Vendor
    Sharp
    Product
    Mx-4071s
    Vendor
    Sharp
    Product
    Mx-5051
    Vendor
    Sharp
    Product
    Mx-5071
    Vendor
    Sharp
    Product
    Mx-5071s
    Vendor
    Sharp
    Product
    Mx-6051
    Vendor
    Sharp
    Product
    Mx-6071
    Vendor
    Sharp
    Product
    Mx-6071s
    Vendor
    Sharp
    Product
    Mx-6580n
    Vendor
    Sharp
    Product
    Mx-7081
    Vendor
    Sharp
    Product
    Mx-7090n
    Vendor
    Sharp
    Product
    Mx-7580n
    Vendor
    Sharp
    Product
    Mx-8081
    Vendor
    Sharp
    Product
    Mx-8090n

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2024-48870 (CVSS 6.2) — Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cros…
    CVE-2024-47801 (CVSS 7.4) — Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cros…
    CVE-2024-47549 (CVSS 7.4) — Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination…
    CVE-2024-47406 (CVSS 9.1) — Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication byp…
    CVE-2024-47005 (CVSS 8.1) — Sharp and Toshiba Tec MFPs provide configuration related APIs. They are expected to be called by administrativ…
    CVE-2024-45842 (CVSS 5.3) — Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vuln…
    CVE-2024-45829 (CVSS 4.9) — Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are …
    CVE-2024-43424 (CVSS 7.5) — Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnera…
    CVE-2024-42420 (CVSS 7.5) — Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of …
    CVE-2022-45796 (CVSS 9.1) — Command injection vulnerability in nw_interface.html in SHARP multifunction printers (MFPs)'s Digital Full-col…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High