CVE-2024-31153

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Improper input validation for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Feb 12, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-311547.5Improper input validation in UEFI firmware for some Intel(R) Server S2600BPBR may allow a privileged user to potentially enable escalation o CVE-2024-311557.5Improper buffer restrictions in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation CVE-2024-311568.0A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker CVE-2024-311575.3Improper initialization in UEFI firmware OutOfBandXML module in some Intel(R) Processors may allow a privileged user to potentially enable i CVE-2024-311587.5Improper input validation in UEFI firmware in some Intel(R) Server Board S2600BP Family may allow a privileged user to potentially enable es CVE-2024-311594.8The parameter used in the certain page of ASUS Download Master is not properly filtered for user input. A remote attacker with administrativ CVE-2024-31169.8pgAdmin <= 8.4 is affected by a Remote Code Execution (RCE) vulnerability through the validate binary path API. This vulnerability allows a CVE-2024-311604.8The parameter used in the certain page of ASUS Download Master is not properly filtered for user input. A remote attacker with administrativ CVE-2024-311617.2The upload functionality of ASUS Download Master does not properly filter user input. Remote attackers with administrative privilege can exp CVE-2024-311627.2The specific function parameter of ASUS Download Master does not properly filter user input. An unauthenticated remote attacker with adminis CVE-2024-311637.2ASUS Download Master has a buffer overflow vulnerability. An unauthenticated remote attacker with administrative privileges can exploit this CVE-2024-311647.5Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vu