CVE-2024-51979

Description

An authenticated attacker may trigger a stack based buffer overflow by performing a malformed request to either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631). The malformed request will contain an empty Origin header value and a malformed Referer header value. The Referer header value will trigger a stack based buffer overflow when the host value in the Referer header is processed and is greater than 64 bytes in length.

PUBLISHED Reserved 2024-11-04 | Published 2025-06-25 | Updated 2026-04-07 | Assigner rapid7

Problem types

CWE-121 Stack-based Buffer Overflow

Product status

Credits

Stephen Fewer, Principal Security Researcher at Rapid7 finder

References

assets.contentstack.io/...rability-disclosure-whitepaper.pdf exploit

support.brother.com/...spx?prod=group2&faqid=faq00100846_000 vendor-advisory

support.brother.com/...spx?prod=group2&faqid=faq00100848_000 vendor-advisory

support.brother.com/...?prod=lmgroup1&faqid=faqp00100620_000 vendor-advisory

www.fujifilm.com/...pany/news/notice/2025/0625_announce.html vendor-advisory

www.ricoh.com/...ty/vulnerabilities/vul?id=ricoh-2025-000007 vendor-advisory

www.konicaminolta.com/...urity/advisory/pdf/km-2025-0001.pdf vendor-advisory

www.rapid7.com/...her-devices-multiple-vulnerabilities-fixed third-party-advisory

assets.contentstack.io/...rability-disclosure-whitepaper.pdf technical-description

github.com/sfewer-r7/BrotherVulnerabilities exploit

cve.org (CVE-2024-51979)

nvd.nist.gov (CVE-2024-51979)

Download JSON