CVE-2024-49834

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Feb 3, 2025
Updated: Feb 5, 2025
CWE ID 129

Summary

CVE-2024-49834 is a newly identified memory corruption vulnerability that can be triggered during the power-up or power-down sequence of a camera sensor. This issue arises due to a flaw in the sensor's firmware, potentially allowing an attacker to manipulate the sensor's memory and gain unauthorized control over its functions. Successful exploitation of this vulnerability could lead to denial-of-service attacks, data theft, or even complete system takeover. Camera manufacturers and users are strongly advised to apply patches and updates as soon as they become available to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share