[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fF8o4D7uC5XDdepgO2W4kGBlKJNXDHTQjVJb3VsUwDO4":3,"g5a-risk:CVE-2024-7347":144},{"success":4,"data":5,"meta":141},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":27,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":57,"references":58,"referencesCount":73,"weaknesses":74,"weaknessesCount":89,"isActivelyExploited":90,"cisaInfo":27,"otxData":27,"relatedBlogPosts":91,"seoMetadata":92,"configurations":117,"relatedVendorCves":139,"notableEvents":140},"CVE-2024-7347","What is CVE-2024-7347?","NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_mp4_module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted mp4 file with the ngx_http_mp4_module.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in...","2024-08-14T15:15:31.87","2025-11-03T21:18:48.093",4.7,"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"f5sirt@f5.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","HIGH","LOW","NONE","UNCHANGED","MEDIUM",null,1,3.6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[],0.0032,[36,36,36,36,36,36,36],"Medium",[40,45,48,51,54],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"f5","nginx_open_source","*","cpe:2.3:a:f5:nginx_open_source:*:*:*:*:*:*:*:*",{"vendor":41,"product":42,"version":46,"criteria":47,"vulnerable":4},"1.27.0","cpe:2.3:a:f5:nginx_open_source:1.27.0:*:*:*:*:*:*:*",{"vendor":41,"product":49,"version":43,"criteria":50,"vulnerable":4},"nginx_plus","cpe:2.3:a:f5:nginx_plus:*:*:*:*:*:*:*:*",{"vendor":41,"product":49,"version":52,"criteria":53,"vulnerable":4},"r31","cpe:2.3:a:f5:nginx_plus:r31:-:*:*:*:*:*:*",{"vendor":41,"product":49,"version":55,"criteria":56,"vulnerable":4},"r32","cpe:2.3:a:f5:nginx_plus:r32:-:*:*:*:*:*:*",5,[59,64,69],{"url":60,"source":61,"tags":62},"https:\u002F\u002Fmy.f5.com\u002Fmanage\u002Fs\u002Farticle\u002FK000140529","F5",[63],"Vendor Advisory",{"url":65,"source":66,"tags":67},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F08\u002F14\u002F4","Openwall",[68],"Mailing List",{"url":70,"source":71,"tags":72},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F03\u002Fmsg00017.html","Debian",[],3,[75,83],{"id":76,"name":77,"description":78,"extendedDescription":79,"status":80,"abstraction":81,"structure":82},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",{"id":84,"name":85,"description":86,"extendedDescription":87,"status":80,"abstraction":88,"structure":82},"CWE-126","Buffer Over-read","The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.","This typically occurs when the pointer or its index is incremented to a position beyond the bounds of the buffer or when pointer arithmetic results in a position outside of the valid memory location to name a few. This may result in exposure of sensitive information or possibly a crash.","Variant",2,false,[],{"title":93,"metaDescription":94,"keywords":95,"canonicalUrl":96,"structuredData":97},"What is CVE-2024-7347? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-7347, a medium severity cyber security vulnerability from 2024. NGINX Open Source and NGINX Plus have a vulnerability in t...","CVE-2024-7347, CVE-2024-7347 vulnerability, CVE-2024-7347 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, f5 security, nginx_open_source vulnerability, nginx_plus vulnerability","\u002Fwhat-is\u002Fcve-2024-7347",{"@context":98,"@type":99,"headline":93,"description":94,"datePublished":10,"dateModified":11,"author":100,"publisher":104,"about":108,"mainEntityOfPage":112,"articleSection":115,"keywords":116},"https:\u002F\u002Fschema.org","TechArticle",{"@type":101,"name":102,"url":103},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":101,"name":102,"url":103,"logo":105},{"@type":106,"url":107},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":109,"name":6,"description":110,"additionalType":111},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":113,"@id":114},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-7347","Cybersecurity","CVE-2024-7347, CVE-2024-7347 vulnerability, CVE-2024-7347 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[118],{"Operator":27,"Negate":27,"Nodes":119},[120],{"Operator":121,"Negate":90,"CPEMatch":122},"OR",[123,127,129,132,134,137],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":124,"VersionStartExcluding":27,"VersionStartIncluding":125,"VersionEndExcluding":126,"VersionEndIncluding":27},"F0EA24A0-D4CA-4394-9A01-D7B9A5DBAF0C","1.5.13","1.26.2",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":128,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"97A8277F-E124-4A18-A545-05DE412FF811",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":130,"VersionStartExcluding":27,"VersionStartIncluding":131,"VersionEndExcluding":52,"VersionEndIncluding":27},"462BF1FE-417D-4D78-B77E-CD34AA6E792B","r27",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":133,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"8248517E-D805-4928-8252-2168472341EF",{"Vulnerable":4,"Criteria":135,"MatchCriteriaID":136,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:f5:nginx_plus:r31:p1:*:*:*:*:*:*","9D5BB4C0-B862-4CDD-AA54-1BC1BDF27005",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":138,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"36C4308E-651E-437C-84E7-10C542E3ADC2",[],[],{"lastModified":11,"cacheTime":142,"version":143},1793207287875,"2.0",{"score":145,"band":146,"action":147,"scoredAt":148},18,"Info","Track","2026-07-01T10:33:46.302354+00:00"]