CVE-2024-30161

MEDIUM EPSS 36.0%

Published Mar 24, 20242y ago · Modified Jun 17, 20262w ago

6.5 CVSS 3.1

Medium

Published Mar 24, 2024 2y ago

Last Modified Jun 17, 2026 2w ago

Description

In Qt 6.5.4, 6.5.5, and 6.6.2, QNetworkReply header data might be accessed via a dangling pointer in Qt for WebAssembly (wasm). (Earlier and later versions are unaffected.)

CVSS Details

Base Score

6.5

Exploitability

3.9

Impact

2.5

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction None

Scope Unchanged

Confidentiality Low

Integrity Low

Availability None

Threat Intelligence

EPSS Exploit Probability

36.0% percentile

Exploit & Patch Status

No Known Exploit

Patch Available

Weaknesses 1

CWE-416 Use After Free Memory Safety

Affected Products 3

Vendor	Product	Version	Range
qt	qt	6.5.4	any
qt	qt	6.5.5	any
qt	qt	6.6.2	any

References 1

codereview.qt-project.org https://codereview.qt-project.org/c/qt/qtbase/+/544314

Patch

Remediation

codereview.qt-project.org https://codereview.qt-project.org/c/qt/qtbase/+/544314

Patch