Vulnerability Description
In Qt 6.5.4, 6.5.5, and 6.6.2, QNetworkReply header data might be accessed via a dangling pointer in Qt for WebAssembly (wasm). (Earlier and later versions are unaffected.)
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Qt | Qt | 6.5.4 |
Related Weaknesses (CWE)
References
- https://codereview.qt-project.org/c/qt/qtbase/+/544314Patch
- https://codereview.qt-project.org/c/qt/qtbase/+/544314Patch
FAQ
What is CVE-2024-30161?
CVE-2024-30161 is a vulnerability with a CVSS score of 6.5 (MEDIUM). In Qt 6.5.4, 6.5.5, and 6.6.2, QNetworkReply header data might be accessed via a dangling pointer in Qt for WebAssembly (wasm). (Earlier and later versions are unaffected.)
How severe is CVE-2024-30161?
CVE-2024-30161 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-30161?
Check the references section above for vendor advisories and patch information. Affected products include: Qt Qt.