V8 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
CVE-2024-11801

7.8HIGH

Key Information:

Vendor
CVE Published:
28 November 2024

What is CVE-2024-11801?

The Fuji Electric Tellus Lite V-Simulator 5 component contains an Out-Of-Bounds Write vulnerability due to improper validation of user-supplied V8 file data. This flaw permits a remote attacker to execute arbitrary code if the target user opens a specially crafted malicious file or visits a harmful web page. The vulnerability arises specifically from the parsing mechanism applied to V8 files, potentially allowing code execution within the context of the current process. Proper remediation is essential to protect affected installations from exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Tellus Lite 4.0.20.0

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.