VDB

CVE-2024-24246

CVE-2024-24246 PUBLISHED CVSS 5.5 MEDIUM

Heap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via the std::__shared_count() function at /bits/shared_ptr_base.h.

EPSS 0.09% · 25.1th percentile

Risk Scores

CVSS v3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
0.09%
25.1th percentile

Affected Products

VendorProductVersions
fedoraprojectfedora40, 39, 38
fedoraprojectfedora39, 40, 38
n/an/a*
qpdf_projectqpdf11.9.0
qpdf_projectqpdf11.9.0

Timeline

  • Feb 29, 2024 CVE Published
  • Mar 1, 2024 EPSS Score
  • Mar 27, 2024 EPSS Score
  • Apr 23, 2024 EPSS Score
  • May 19, 2024 EPSS Score
  • Jun 15, 2024 EPSS Score
  • Jul 11, 2024 EPSS Score
  • Aug 7, 2024 EPSS Score
  • Sep 2, 2024 EPSS Score
  • Sep 29, 2024 EPSS Score
  • Oct 4, 2024 Coalition ESS Score
  • Oct 25, 2024 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›