Threats tagged 'ghsa-cmfc-j23h-6h8c'

CVE-2024-28038 is a critical stack buffer overflow vulnerability in the web interface of certain devices. It occurs when the MFPSESSIONID cookie parameter receives an excessively long string, causing improper processing and a stack buffer overflow. The vulnerability affects specific products and versions as detailed by the respective vendors. The flaw has a high CVSS score of 9.0, indicating severe impact on confidentiality, integrity, and availability. No public exploits or patches have been confirmed yet.