An out-of-bounds read vulnerability exists in the Agent component of Ivanti Endpoint Manager versions prior to 2024 SU7. This flaw allows a remote unauthenticated attacker to cause a crash of the agent service, resulting in a denial of service condition. The vulnerability does not impact confidentiality or integrity but affects availability by crashing the service.