Medium severity5.3NVD Advisory· Published Jan 30, 2025· Updated Jun 17, 2026

CVE-2024-10604

Description

Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN, TCP timestamp, TCP and UDP source ports, and IPv4/IPv6 fragment ID allow for these values to be guessed under circumstances

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Google/Fuchsia3 versions
cpe:2.3:o:google:fuchsia:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:google:fuchsia:*:*:*:*:*:*:*:*range: <f16
- (no CPE)
- (no CPE)range: Release F19
Fuchsia/Fuchsiallm-fuzzy

Patches

Vulnerability mechanics

References

fuchsia.googlesource.com/fuchsia/+/40e7fbcdcd013441daf4492f1ead349a9e5b80dcnvdPatch
fuchsia.googlesource.com/fuchsia/+/a3c17a4d6b3140f9175d6cf6ac4eb4e775f8dea8nvdPatch
www.ndss-symposium.org/wp-content/uploads/2025-122-paper.pdfnvdExploitMitigationThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000