CVE-2024-38157

Azure IoT SDK Remote Code Execution Vulnerability (CVE-2024-38157) affects the Azure IoT SDK. CVSSv3.1 base score 7.0 with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. Exploitation requires local access; impact includes compromise of confidentiality, integrity and availability. Connected documents...

CVE-2024-38158

CVE-2024-38158 affects the Azure IoT SDK. Connected sources indicate the issue involves a memory-after-free condition that can lead to remote code execution in affected Azure IoT SDK components. Some third‑party advisories describe it as enabling arbitrary code execution on vulnerable systems, wi...