CVE-2024-36254

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs (multifunction printers), which may lead to a denial-of-service (DoS) condition.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
Sharp CorporationMultiple MFPs (multifunction printers)See the information provided by Sharp Corporation listed under [References]
Toshiba Tec CorporationMultiple MFPs (multifunction printers)See the information provided by Toshiba Tec Corporation listed under [References]
sharpbp-90c70<= 200
sharpbp-90c80<= 200
sharpbp-70c65<= 310
sharpbp-70c55<= 310
sharpbp-70c45<= 310
sharpbp-70c36<= 310
sharpbp-70c31<= 310
sharpbp-60c45<= 310
sharpbp-60c36<= 310
sharpbp-60c31<= 310
sharpbp-50c65<= 310
sharpbp-50c55<= 310
sharpbp-50c45<= 310
sharpbp-50c36<= 310
sharpbp-50c31<= 310
sharpbp-50c26<= 310
sharpbp-55c26<= 310
sharpmx-8081<= 150
sharpmx-7081<= 150
sharpmx-6071<= 612
sharpmx-5071<= 612
sharpmx-4071<= 612
sharpmx-3571<= 612
sharpmx-3071<= 612
sharpmx-4061<= 612
sharpmx-3561<= 612
sharpmx-3061<= 612
sharpmx-6051<= 612
sharpmx-5051<= 612
sharpmx-4051<= 612
sharpmx-3551<= 612
sharpmx-3051<= 612
sharpmx-2651<= 612
sharpmx-6071s<= 612
sharpmx-5071s<= 612
sharpmx-4071s<= 612
sharpmx-3571s<= 612
sharpmx-3071s<= 612
sharpmx-4061s<= 612
sharpmx-3561s<= 612
sharpmx-3061s<= 612
sharpbp-30c25<= 123
sharpbp-30c25y<= 123
sharpbp-30c25z<= 123
sharpbp-30c25t<= 123
sharpmx-7580n<= 502
sharpmx-6580n<= 502
sharpmx-8090n<= 404

References

Timeline

Published
Nov 26, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-362555.7Mattermost versions 9.5.x <= 9.5.3, 9.6.x <= 9.6.1 and 8.1.x <= 8.1.12 fail to perform proper input validation on post actions which allows CVE-2024-362575.3Mattermost versions 9.5.x <= 9.5.5 and 9.8.0, when using shared channels with multiple remote servers connected, fail to check that the remoCVE-2024-362589.8A stack-based buffer overflow vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210CVE-2024-362596.5Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attackers to extract sensCVE-2024-36264.3The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnCVE-2024-362609.8in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.CVE-2024-362615.7Improper access control in Intel(R) RAID Web Console software all versions may allow an authenticated user to potentially enable denial of sCVE-2024-362627.2Race condition in some Intel(R) System Security Report and System Resources Defense firmware may allow a privileged user to potentially enabCVE-2024-362638.1** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ApacheCVE-2024-362649.8** UNSUPPORTED WHEN ASSIGNED ** Improper Authentication vulnerability in Apache Submarine Commons Utils. If the user doesn't explicitly setCVE-2024-362659.8** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Submarine Server Core. This issue affects Apache Submarine CVE-2024-362667.8A vulnerability has been identified in PowerSys (All versions < V3.11). The affected application insufficiently protects responses to authen
CVE-2024-36254: High severity, CVSS 7.5 | Vulnix