Skip to content
Fencer Vulns
high 7.5

CVE-2024-36254 json

Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs (multifunction printers), which may…

published 2024-11-26 23 mo ago modified 2026-06-17 4 mo ago also EUVD-2024-36336

cvss
7.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.7%
EPSS 0.7% chance of exploitation in 30 days, percentile 54%
public exploits
0
none known

Summary

Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs (multifunction printers), which may lead to a denial-of-service (DoS) condition.

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
partial
Assessed
23 mo ago

Exploit prediction

0.72% chance of exploitation in the next 30 days, higher than 54% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

  • Sharp Corporation Multiple MFPs (multifunction printers)
  • Toshiba Tec Corporation Multiple MFPs (multifunction printers)
  • sharp bp-90c70
  • sharp bp-90c80
  • sharp bp-70c65
  • sharp bp-70c55
  • sharp bp-70c45
  • sharp bp-70c36
  • sharp bp-70c31
  • sharp bp-60c45
  • sharp bp-60c36
  • sharp bp-60c31
  • sharp bp-50c65
  • sharp bp-50c55
  • sharp bp-50c45
  • sharp bp-50c36
  • sharp bp-50c31
  • sharp bp-50c26
  • sharp bp-55c26
  • sharp mx-8081
  • sharp mx-7081
  • sharp mx-6071
  • sharp mx-5071
  • sharp mx-4071
  • sharp mx-3571
  • sharp mx-3071
  • sharp mx-4061
  • sharp mx-3561
  • sharp mx-3061
  • sharp mx-6051
  • sharp mx-5051
  • sharp mx-4051
  • sharp mx-3551
  • sharp mx-3051
  • sharp mx-2651
  • sharp mx-6071s
  • sharp mx-5071s
  • sharp mx-4071s
  • sharp mx-3571s
  • sharp mx-3071s
  • sharp mx-4061s
  • sharp mx-3561s
  • sharp mx-3061s
  • sharp bp-30c25
  • sharp bp-30c25y
  • sharp bp-30c25z
  • sharp bp-30c25t
  • sharp mx-7580n
  • sharp mx-6580n
  • sharp mx-8090n

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.