KV STUDIO Out-of-bounds Read Vulnerability May Lead to Information Disclosure or Arbitrary Code Execution
CVE-2024-29219

7.8HIGH

Key Information:

Vendor

Keyence Corporation

Status
Kv Studio
Kv Replay Viewer
Vt5-wx15/wx12
Vendor
CVE Published:
15 April 2024

What is CVE-2024-29219?

An out-of-bounds read vulnerability exists in Keyence's KV products, including KV STUDIO and KV REPLAY VIEWER, as well as VT5-WX15/WX12 series. This vulnerability allows an attacker to potentially disclose sensitive information or execute arbitrary code by tricking a user into opening a specially crafted file. Users are advised to update their software and exercise caution when handling files from untrusted sources.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

KV REPLAY VIEWER Ver.2.64 and earlier

KV STUDIO Ver.11.64 and earlier

VT5-WX15/WX12 Ver.6.02 and earlier

References

https://www.keyence.com/kv_vulnerability240924_en
https://jvn.jp/en/vu/JVNVU95439120/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.