CVE-2024-48982
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-48982
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An issue was discovered in MBed OS 6.16.0. Its hci parsing software dynamically determines the length of certain hci packets by reading a byte from its header. This value is assumed to be greater than or equal to 3, but the software doesn't ensure that this is the case. Supplying a length less than 3 leads to a buffer overflow in a buffer that is allocated later. It is simultaneously possible to cause another integer overflow by supplying large length values because the provided length value is increased by a few bytes to account for additional information that is supposed to be stored there. This bug is trivial to exploit for a denial of service but is not certain to suffice to bring the system down and can generally not be exploited further because the exploitable buffer is dynamically allocated.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
ARM Mbed OS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ARM Mbed OS是英国ARM公司的一套专用于物联网的开源嵌入式操作系统。 ARM Mbed OS 6.16.0版本存在安全漏洞，该漏洞源于其HCI解析软件在读取数据包头部的一个字节以确定数据包长度时，当提供的长度不同于预设值会导致缓冲区溢出。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2024-48982
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-48982
请登录查看更多情报信息。
Same Patch Batch · n/a · 2024-11-20 · 40 CVEs total
| CVE-2024-11492 | 3.5 LOW | 115cms appurladd.html cross site scripting |
| CVE-2024-11491 | 3.5 LOW | 115cms useradmin.html cross site scripting |
| CVE-2024-11490 | 3.5 LOW | 115cms set.html cross site scripting |
| CVE-2024-11489 | 3.5 LOW | 115cms file.html cross site scripting |
| CVE-2024-11488 | 3.5 LOW | 115cms web_user.html cross site scripting |
| CVE-2024-11493 | 3.5 LOW | 115cms pageAE.html cross site scripting |
| CVE-2024-48530 | eSoft Planner 安全漏洞 | |
| CVE-2024-52770 | DedeBIZ 安全漏洞 | |
| CVE-2024-48983 | ARM Mbed OS 安全漏洞 | |
| CVE-2024-48531 | eSoft Planner 安全漏洞 | |
| CVE-2024-33439 | KASDA KW5515 安全漏洞 | |
| CVE-2024-52725 | SEMCMS 安全漏洞 | |
| CVE-2024-52765 | H3C GR-1800AX 安全漏洞 | |
| CVE-2024-52771 | DedeBIZ 安全漏洞 | |
| CVE-2024-52754 | D-Link DI-8400 安全漏洞 | |
| CVE-2024-52677 | HkCms 安全漏洞 | |
| CVE-2024-52702 | MyBB 安全漏洞 | |
| CVE-2024-52769 | DedeBIZ 安全漏洞 | |
| CVE-2024-52701 | Piwigo 安全漏洞 | |
| CVE-2024-52757 | D-Link DI-8400 安全漏洞 |
Showing top 20 of 40 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2024-48982
No comments yet