CVE-2024-51979

An authenticated attacker may trigger a stack based buffer overflow by performing a malformed request to either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631). The malformed request will contain an empty Origin header value and a malformed Referer header value. The Referer header value will trigger a stack based buffer overflow when the host value in the Referer header is processed and is greater than 64 bytes in length.

• CWE-121

• https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf
• https://github.com/sfewer-r7/BrotherVulnerabilities
• https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000
• https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100848_000
• https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faqp00100620_000
• https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0625_announce.html
• https://www.konicaminolta.com/global-en/security/advisory/pdf/km-2025-0001.pdf
• https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed
• https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000007
• https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf

Published

Jun 25, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-51962A SQL injection vulnerability in ArcGIS Server allows an EDI…8.7
• CVE-2024-51963There is a stored Cross-site Scripting vulnerability in ArcG…4.8
• CVE-2024-51966There is a path traversal vulnerability in ESRI ArcGIS Serve…4.9
• CVE-2024-5197There exists interger overflows in libvpx in versions prior …9.1
• CVE-2024-51977An unauthenticated attacker who can access either the HTTP s…5.3
• CVE-2024-51978An unauthenticated attacker who knows the target device's se…9.8
• CVE-2024-5198OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivi…3.3
• CVE-2024-51980An unauthenticated attacker may perform a limited server sid…5.3
• CVE-2024-51981An unauthenticated attacker may perform a blind server side …5.3
• CVE-2024-51982An unauthenticated attacker who can connect to TCP port 9100…7.5
• CVE-2024-51983An unauthenticated attacker who can connect to the Web Servi…7.5
• CVE-2024-51984An authenticated attacker can reconfigure the target device …6.8