Medium severity5.5NVD Advisory· Published Feb 29, 2024· Updated Jun 17, 2026
CVE-2024-24246
CVE-2024-24246
Description
Heap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via the std::__shared_count() function at /bits/shared_ptr_base.h.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:a:qpdf_project:qpdf:11.9.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:qpdf_project:qpdf:11.9.0:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: <11.9.0
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
7- github.com/qpdf/qpdf/issues/1123nvdExploitVendor Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4WLK6ICPJUMOJNHZQWXAA5MPXG5JHZZL/nvdMailing List
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FX3D3YCNS6CQL3774OFUROLP3EM25ILC/nvdMailing List
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3N6TULMEYVCLXO47Y5W4VWCJMSB72CB/nvdMailing List
- lists.fedoraproject.org/archives/list/[email protected]/message/4WLK6ICPJUMOJNHZQWXAA5MPXG5JHZZL/nvd
- lists.fedoraproject.org/archives/list/[email protected]/message/FX3D3YCNS6CQL3774OFUROLP3EM25ILC/nvd
- lists.fedoraproject.org/archives/list/[email protected]/message/U3N6TULMEYVCLXO47Y5W4VWCJMSB72CB/nvd
News mentions
0No linked articles in our index yet.