CVE-2024-38389

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

There is an Out-of-bounds read vulnerability in TELLUS (v4.0.19.0 and earlier) and TELLUS Lite (v4.0.19.0 and earlier). If a user opens a specially crafted file, information may be disclosed and/or arbitrary code may be executed.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.	TELLUS	v4.0.19.0 and earlier
FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.	TELLUS Lite	v4.0.19.0 and earlier
fujielectric	tellus	<= 4.0.19.0
fujielectric	tellus_lite	<= 4.0.19.0

References

Timeline

Published: Nov 28, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-38396.5Out of bounds read in Fonts in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to obtain potentially sensitive information fr CVE-2024-383905.5In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails CVE-2024-383929.1Pexip Infinity Connect before 1.13.0 lacks sufficient authenticity checks during the loading of resources, and thus remote attackers can cau CVE-2024-383944.3Mismatches in interpreting USB authorization policy between GNOME Settings Daemon (GSD) through 46.0 and the Linux kernel's underlying devic CVE-2024-383959.8In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is no CVE-2024-383969.8An issue was discovered in iTerm2 3.5.x before 3.5.2. Unfiltered use of an escape sequence to report a window title, in combination with the CVE-2024-383977.5Transient DOS while parsing probe response and assoc response frame.CVE-2024-383997.8Memory corruption while processing user packets to generate page faults.CVE-2024-38407.5Insufficient policy enforcement in Site Isolation in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass navigation res CVE-2024-384017.8Memory corruption while processing concurrent IOCTL calls.CVE-2024-384027.8Memory corruption while processing IOCTL call for getting group info.CVE-2024-384036.5Transient DOS while parsing BTM ML IE when per STA profile is not included.