[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fF8o4D7uC5XDdepgO2W4kGBlKJNXDHTQjVJb3VsUwDO4":3,"g5a-risk:CVE-2024-7347":152},{"success":4,"data":5,"meta":149},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":44,"epssPercentile":29,"epssTimeSeries":45,"severity":46,"affectedProducts":47,"affectedProductsCount":65,"references":66,"referencesCount":81,"weaknesses":82,"weaknessesCount":97,"isActivelyExploited":98,"cisaInfo":29,"otxData":29,"relatedBlogPosts":99,"seoMetadata":100,"configurations":125,"relatedVendorCves":147,"notableEvents":148},"CVE-2024-7347","What is CVE-2024-7347?","NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_mp4_module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted mp4 file with the ngx_http_mp4_module.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in...","2024-08-14T15:15:31.87","2026-06-17T08:19:54.837",5.7,"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"CVSSMetricV31":15,"CVSSMetricV30":36,"CVSSMetricV2":37,"CVSSMetricV40":38},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"f5sirt@f5.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H","LOCAL","HIGH","LOW","NONE","UNCHANGED",4.7,"MEDIUM",null,1,3.6,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":30,"ImpactScore":31},"nvd@nist.gov","Primary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},[],[],[39],{"Source":17,"Type":18,"CVSSData":40},{"Version":41,"VectorString":13,"BaseScore":12,"BaseSeverity":28,"AttackVector":22,"AttackComplexity":23,"AttackRequirements":42,"PrivilegesRequired":24,"UserInteraction":25,"VulnConfidentialityImpact":25,"VulnIntegrityImpact":25,"VulnAvailabilityImpact":23,"SubConfidentialityImpact":25,"SubIntegrityImpact":25,"SubAvailabilityImpact":25,"ExploitMaturity":43,"ConfidentialityRequirement":43,"IntegrityRequirement":43,"AvailabilityRequirement":43,"ModifiedAttackVector":43,"ModifiedAttackComplexity":43,"ModifiedAttackRequirements":43,"ModifiedPrivilegesRequired":43,"ModifiedUserInteraction":43,"ModifiedVulnConfidentialityImpact":43,"ModifiedVulnIntegrityImpact":43,"ModifiedVulnAvailabilityImpact":43,"ModifiedSubConfidentialityImpact":43,"ModifiedSubIntegrityImpact":43,"ModifiedSubAvailabilityImpact":43,"Safety":43,"Automatable":43,"Recovery":43,"ValueDensity":43,"VulnerabilityResponseEffort":43,"ProviderUrgency":43},"4.0","PRESENT","NOT_DEFINED",0.0032,[44,44,44,44,44,44,44],"Medium",[48,53,56,59,62],{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"f5","nginx_open_source","*","cpe:2.3:a:f5:nginx_open_source:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"1.27.0","cpe:2.3:a:f5:nginx_open_source:1.27.0:*:*:*:*:*:*:*",{"vendor":49,"product":57,"version":51,"criteria":58,"vulnerable":4},"nginx_plus","cpe:2.3:a:f5:nginx_plus:*:*:*:*:*:*:*:*",{"vendor":49,"product":57,"version":60,"criteria":61,"vulnerable":4},"r31","cpe:2.3:a:f5:nginx_plus:r31:-:*:*:*:*:*:*",{"vendor":49,"product":57,"version":63,"criteria":64,"vulnerable":4},"r32","cpe:2.3:a:f5:nginx_plus:r32:-:*:*:*:*:*:*",5,[67,72,77],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fmy.f5.com\u002Fmanage\u002Fs\u002Farticle\u002FK000140529","F5",[71],"Vendor Advisory",{"url":73,"source":74,"tags":75},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F08\u002F14\u002F4","Openwall",[76],"Mailing List",{"url":78,"source":79,"tags":80},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F03\u002Fmsg00017.html","Debian",[],3,[83,91],{"id":84,"name":85,"description":86,"extendedDescription":87,"status":88,"abstraction":89,"structure":90},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",{"id":92,"name":93,"description":94,"extendedDescription":95,"status":88,"abstraction":96,"structure":90},"CWE-126","Buffer Over-read","The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.","This typically occurs when the pointer or its index is incremented to a position beyond the bounds of the buffer or when pointer arithmetic results in a position outside of the valid memory location to name a few. This may result in exposure of sensitive information or possibly a crash.","Variant",2,false,[],{"title":101,"metaDescription":102,"keywords":103,"canonicalUrl":104,"structuredData":105},"What is CVE-2024-7347? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-7347, a medium severity cyber security vulnerability from 2024. NGINX Open Source and NGINX Plus have a vulnerability in t...","CVE-2024-7347, CVE-2024-7347 vulnerability, CVE-2024-7347 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, f5 security, nginx_open_source vulnerability, nginx_plus vulnerability","\u002Fwhat-is\u002Fcve-2024-7347",{"@context":106,"@type":107,"headline":101,"description":102,"datePublished":10,"dateModified":11,"author":108,"publisher":112,"about":116,"mainEntityOfPage":120,"articleSection":123,"keywords":124},"https:\u002F\u002Fschema.org","TechArticle",{"@type":109,"name":110,"url":111},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":109,"name":110,"url":111,"logo":113},{"@type":114,"url":115},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":117,"name":6,"description":118,"additionalType":119},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":121,"@id":122},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-7347","Cybersecurity","CVE-2024-7347, CVE-2024-7347 vulnerability, CVE-2024-7347 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[126],{"Operator":29,"Negate":29,"Nodes":127},[128],{"Operator":129,"Negate":98,"CPEMatch":130},"OR",[131,135,137,140,142,145],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":132,"VersionStartExcluding":29,"VersionStartIncluding":133,"VersionEndExcluding":134,"VersionEndIncluding":29},"F0EA24A0-D4CA-4394-9A01-D7B9A5DBAF0C","1.5.13","1.26.2",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":136,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"97A8277F-E124-4A18-A545-05DE412FF811",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":138,"VersionStartExcluding":29,"VersionStartIncluding":139,"VersionEndExcluding":60,"VersionEndIncluding":29},"462BF1FE-417D-4D78-B77E-CD34AA6E792B","r27",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":141,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"8248517E-D805-4928-8252-2168472341EF",{"Vulnerable":4,"Criteria":143,"MatchCriteriaID":144,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:a:f5:nginx_plus:r31:p1:*:*:*:*:*:*","9D5BB4C0-B862-4CDD-AA54-1BC1BDF27005",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":146,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"36C4308E-651E-437C-84E7-10C542E3ADC2",[],[],{"lastModified":11,"cacheTime":150,"version":151},1792257341668,"2.0",{"score":153,"band":154,"action":155,"scoredAt":156},18,"Info","Track","2026-10-16T07:03:31.961683+00:00"]