AZL-38545

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-38545.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-38545

Upstream

CVE-2024-30161

Published

2024-03-24T01:15:45Z

Modified

2026-04-21T04:28:30.972866Z

Summary

CVE-2024-30161 affecting package qtbase for versions less than 6.6.3-2

Details

In Qt 6.5.4, 6.5.5, and 6.6.2, QNetworkReply header data might be accessed via a dangling pointer in Qt for WebAssembly (wasm). (Earlier and later versions are unaffected.)

References

https://nvd.nist.gov/vuln/detail/CVE-2024-30161

Affected packages

Azure Linux:3 / qtbase

Package

Name: qtbase
Purl: pkg:rpm/azure-linux/qtbase

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.6.3-2

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-38545.json"