CVE-2024-52759 Memory corruption in n/a

Low 3.5 Published Updated

A buffer overflow in the D-Link DI-8003 router allows attackers to execute arbitrary code or cause a denial of service via the ip parameter.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Local or same network only
Victim action needed
Not needed
Fix
None listed

What is CVE-2024-52759?

CVE-2024-52759 is a low-severity memory corruption vulnerability in n/a, published on 19 Nov 2024. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ip_position_asp function.

Weakness: CWE-120

Which versions are affected by CVE-2024-52759?

It affects 1 product.

Products include Dlink Di-8003 Firmware.

How do I fix CVE-2024-52759?

No fix has been published for CVE-2024-52759 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2024-52759 being exploited?

There is no known exploitation of CVE-2024-52759 in the wild and no public exploit code.

Sources

Also known as GHSA-mr5m-3jc5-v2f3.

Is CVE-2024-52759 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free