Log in Start free

Vulnerability · Published Feb 6, 2025 · Assigned by Kaspersky

CVE-2024-13614

Medium 5.3

In plain English

A medium-severity integer overflow in Kaspersky Anti-Ransomware Tool from Kaspersky. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.1%top 97.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Endpoint Security for Windows, Kaspersky Small Office Security, Kaspersky for Windows (Standard, Plus, Premium), Kaspersky Free, Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Security Cloud, Kaspersky Safe Kids, Kaspersky Anti-Ransomware Tool that could allow an authenticated attacker to write data to a limited area outside the allocated kernel memory buffer. The fix was installed automatically for all Kaspersky Endpoint products.

Affected products (as reported)

VendorProductVersions
Kaspersky Kaspersky Anti-Virus SDK for Windows 8.10.1.1943 – through 8.10.1.19438.10.1.1943 CF – through 8.10.1.1943 CF
Kaspersky Kaspersky Security for Virtualization Light Agent 5.2 – before 5.2.27.319
Kaspersky Kaspersky Endpoint Security for Windows see references
Kaspersky Kaspersky Small Office Security see references
Kaspersky Kaspersky for Windows (Standard, Plus, Premium) see references
Kaspersky Kaspersky Free see references
Kaspersky Kaspersky Anti-Virus see references
Kaspersky Kaspersky Internet Security see references
Kaspersky Kaspersky Security Cloud see references
Kaspersky Kaspersky Safe Kids see references
Kaspersky Kaspersky Anti-Ransomware Tool see references

Weakness: CWE-190 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

References