V8 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2024-11801

What is CVE-2024-11801?

The Fuji Electric Tellus Lite V-Simulator 5 component contains an Out-Of-Bounds Write vulnerability due to improper validation of user-supplied V8 file data. This flaw permits a remote attacker to execute arbitrary code if the target user opens a specially crafted malicious file or visits a harmful web page. The vulnerability arises specifically from the parsing mechanism applied to V8 files, potentially allowing code execution within the context of the current process. Proper remediation is essential to protect affected installations from exploitation.

References