AZL-52983 CVE-2024-4741 affecting package edk2 for versions less than 20240524git3e722403cd16-6

🗓️ 13 Nov 2024 11:15:04Reported by GoogleType

osv🔗 osv.dev👁 7 Views

Use after free in OpenSSL SSL_free_buffers may access freed buffers, causing crashes in edk2 below 20240524git3e7.

Reporter	Title	Published	Views	Family All 255
ibm	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale System are now fixed in Storage Scale System 6.2.3.3 and 7.0.0.0 or higher	15 Dec 202520:22	–	ibm
ibm	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
ibm	Security Bulletin: IBM Watson Speech Services Cartridge v5.1.1 is vulnerable to multiple Operator package issues	2 Apr 202517:43	–	ibm
ibm	Security Bulletin: IBM MaaS360 Cloud Extender VPN Module affected by vulnerability (CVE-2024-4741)	17 Jul 202414:49	–	ibm
ibm	Security Bulletin: IBM QRadar Wincollect is using components with known vulnerabilities	9 Jul 202417:03	–	ibm
ibm	Security Bulletin: IBM Watson Speech Services Cartridge v4.8.8 is vulnerable to multiple Operator package issues	1 May 202521:38	–	ibm
ibm	Security Bulletin: Security vulnerability found in package openssl shipped with IBM CICS TX Advanced.	17 Feb 202515:16	–	ibm
ibm	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	6 Aug 202516:37	–	ibm
ibm	Security Bulletin: AIX is vulnerable to arbitrary code execution (CVE-2024-4741) and denial of service (CVE-2024-5535, CVE-2024-4603) due to OpenSSL	30 Jul 202422:02	–	ibm
ibm	Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in OpenSSL (CVE-2024-4741)	28 Mar 202518:51	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-4741

21 Apr 2026 04:33Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5

EPSS0.02945

SSVC