CVE-2024-38389: High severity tellus vulnerability
There is an Out-of-bounds read vulnerability in TELLUS (v4.0.19.0 and earlier) and TELLUS Lite (v4.0.19.0 and earlier). If a user opens a specially crafted file, information may be disclosed and/or arbitrary code may be executed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38389?
CVE-2024-38389 is classified as having a medium severity level due to potential information disclosure and arbitrary code execution.
How do I fix CVE-2024-38389?
To fix CVE-2024-38389, upgrade TELLUS and TELLUS Lite to version 4.0.20.0 or later.
What software is affected by CVE-2024-38389?
CVE-2024-38389 affects TELLUS versions up to and including 4.0.19.0 and TELLUS Lite versions up to and including 4.0.19.0.
What kind of vulnerability is CVE-2024-38389?
CVE-2024-38389 is an Out-of-bounds read vulnerability that can lead to information disclosure.
Can CVE-2024-38389 be exploited remotely?
Yes, CVE-2024-38389 can be exploited if a user opens a specially crafted file, potentially allowing remote code execution.