CVE-2024-24246

2024-02-2900:00:00

mitre

github.com

vulnerability

qpdf

buffer overflow

attackers

crash

application

std::__shared_count()

shared_ptr_base.h

AI Score

7.1

Confidence

Low

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Heap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via the std::__shared_count() function at /bits/shared_ptr_base.h.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:qpdf_project:qpdf:11.9.0:*:*:*:*:*:*:*"
    ],
    "vendor": "qpdf_project",
    "product": "qpdf",
    "versions": [
      {
        "status": "affected",
        "version": "11.9.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*"
    ],
    "vendor": "fedoraproject",
    "product": "fedora",
    "versions": [
      {
        "status": "affected",
        "version": "38"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*"
    ],
    "vendor": "fedoraproject",
    "product": "fedora",
    "versions": [
      {
        "status": "affected",
        "version": "39"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*"
    ],
    "vendor": "fedoraproject",
    "product": "fedora",
    "versions": [
      {
        "status": "affected",
        "version": "40"
      }
    ],
    "defaultStatus": "unknown"
  }
]