Submit #927478: RICOH Aficio SP 3500SF V2.14 Stack-based Buffer Overflowinfo

TitleRICOH Aficio SP 3500SF V2.14 Stack-based Buffer Overflow
DescriptionThe HTTP multipart/form-data parser in the analyzed RICOH Aficio SP 3500SF firmware enters an infinite loop when a multipart part header is not terminated by a newline. The parser retries the same boundary and header without advancing the input position. A malformed HTTP request can therefore prevent the request-processing task from completing and cause a denial of service.
Source⚠️ https://github.com/xiaobor123/vuls-find-VxWorks/tree/main/RICOH/06-SP3500SF-multipart-parser-infinite-loop
User
 xiaobor123 (UID 76914)
Submission08/13/2026 15:30 (2 months ago)
Moderation09/27/2026 16:33 (2 months later)
StatusDuplicate
VulDB entry410908 [Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF up to 20260813 HTTP Multipart Form-Data Parser denial of service]
Points0

Do you know our Splunk app?

Download it now for free!