What is CVE-2024-52876?

CVE-2024-52876 is a high-severity vulnerability in N/a, classified under Out-of-bounds Read. CVSS score: 7.5/10. Published 2024-11-17.

How severe is CVE-2024-52876?

High severity. CVSS v3 base score is 7.5 out of 10.

Out-of-bounds Read in N/a

CVE-2024-52876

Holy Stone Remote ID Module HSRID01, firmware distributed with the Drone Go2 mobile application before 1.1.8, allows unauthenticated "remote power off" actions (in broadcast mode) via multiple read operations on the ASTM Remote ID (0xFFFA) GATT.

Vulnerability class: Buffer Overflow

EPSS: 0.005 (38.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-125 — Out-of-bounds Read

References

cve@mitre.org

Frequently asked questions

What is CVE-2024-52876?: CVE-2024-52876 is a high-severity vulnerability in N/a, classified under Out-of-bounds Read. CVSS score: 7.5/10. Published 2024-11-17.
How severe is CVE-2024-52876?: High severity. CVSS v3 base score is 7.5 out of 10.