Out-of-bounds read in Sharp Corporation Multiple MFPs

CISA ADP · SSVC 2.0.3

Exploitation

None

Automatable

Yes

Technical impact

Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

• Multiple MFPs (multifunction printers) VendorSharp Corporation Affected See the information provided by Sharp Corporation listed under [References] Fixed in — No fix listed CNA
• Multiple MFPs (multifunction printers) VendorToshiba Tec Corporation Affected See the information provided by Toshiba Tec Corporation listed under [References] Fixed in — No fix listed CNA

No fixed version listed by the sources yet.

1. 2026-10-02 Threatist record created from CVE-2024-36254
2. 2026-10-03 Alias added: GHSA-4f95-7725-5826

• TI-2019-02935 Cross-site scripting in Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT… KEVCVSS 3.1CRITICAL 9.8
• TI-2024-22196 Authentication bypass in Sharp Corporation Multiple MFPs CVSS 3.1CRITICAL 9.1
• TI-2024-38467 Sharp Multifunction Printers Local File Inclusion via installed_emanual_down.html CVSS 4.0HIGH 8.7
• TI-2024-24071 Out-of-bounds read in Sharp Corporation Multiple MFPs CVSS 3.1HIGH 7.5
• TI-2019-02936 Stack-based buffer overflow in Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq… CVSS 3.1CRITICAL 9.8
• TI-2024-15783 OS command injection in Sharp Corporation Energy Management Controller with Cloud Services CVSS 3.1CRITICAL 9.8

• CVE-2024-36254 · CVE Program
• CVE-2024-36254 · NVD
• FIRST EPSS
• GHSA-4f95-7725-5826 · GitHub Advisory Database · CC BY 4.0

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences