PT-2024-27975 · Tellus+1 · Tellus+1

·

CVE-2024-38389

·

Published

2024-11-28

·

Updated

2024-12-03

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions TELLUS versions 4.0.19.0 and earlier TELLUS Lite versions 4.0.19.0 and earlier
Description The issue is an Out-of-bounds read vulnerability. If a user opens a specially crafted file, information may be disclosed and/or arbitrary code may be executed.
Recommendations For TELLUS versions 4.0.19.0 and earlier, consider avoiding the use of the software until a patch is available. For TELLUS Lite versions 4.0.19.0 and earlier, consider avoiding the use of the software until a patch is available. As a temporary workaround, consider restricting the opening of files from untrusted sources to minimize the risk of exploitation.

Fix

Out of bounds Read

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2024-38389

Affected Products

Tellus
Tellus Lite