CVE-2023-34312

In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate pointers from inter-process communication, which leads to a write-what-where condition...

CVE-2023-34312

creationtimestamp| type| source ---|---|--- 2023-08-07 13:15:02+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4878 2023-11-09 12:08:37+00:00| seen| https://t.me/arpsyndicate/18 2025-01-09 17:17:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/977...

CVE-2023-34312

In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate pointers from inter-process communication, which leads to a write-what-where condition...

CVE-2023-34312

CVE-2023-34312 affects Tencent QQ (versions up to 9.7.8.29039) and TIM (up to 3.4.7.22084). The issue is a write-what-where condition caused by QQProtect.exe and QQProtectEngine.dll not validating pointers from inter-process communication, enabling a local breach with high impact in confidentiali...