CVE-2024-39936
- Source
- https://cve.org/CVERecord?id=CVE-2024-39936
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-39936.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-39936
- Downstream
- Related
- Published
- 2024-07-04T21:15:10.180Z
- Modified
- 2026-04-09T10:21:02.592210Z
- Severity
-
- 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted() signal has not yet been emitted and processed..
- References
Affected packages
Git / github.com/qt/qtbase
Affected ranges
- Type
- GIT
- Repo
- https://github.com/qt/qtbase
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedIntroducedFixedIntroducedFixedIntroducedFixed
- Database specific
{ "versions": [ { "introduced": "0" }, { "fixed": "5.15.18" }, { "introduced": "6.0.0" }, { "fixed": "6.2.13" }, { "introduced": "6.3.0" }, { "fixed": "6.5.7" }, { "introduced": "6.6.0" }, { "fixed": "6.7.3" } ] }
Affected versions
v5.*
v5.0.0-beta1
v5.0.0-beta2
v5.15.0-alpha1
v5.15.0-beta1
v5.15.0-beta2
v5.15.0-beta3
v5.15.0-beta4
v5.15.10-lts-lgpl
v5.15.11-lts-lgpl
v5.15.12-lts-lgpl
v5.15.13-lts-lgpl
v5.15.14-lts-lgpl
v5.15.15-lts-lgpl
v5.15.16-lts-lgpl
v5.15.3-lts-lgpl
v5.15.4-lts-lgpl
v5.15.5-lts-lgpl
v5.15.6-lts-lgpl
v5.15.7-lts-lgpl
v5.15.8-lts-lgpl
v5.15.9-lts-lgpl
v6.*
v6.0.0-alpha1
v6.0.0-beta1
v6.0.0-beta2
v6.0.0-beta3
v6.0.0-beta4
v6.0.0-beta5
v6.2.0-alpha1
v6.2.0-beta1
v6.2.0-beta2
v6.2.0-beta3
v6.2.0-beta4
v6.2.10-lts-lgpl
v6.2.11-lts-lgpl
v6.2.12-lts-lgpl
v6.2.5-lts-lgpl
v6.2.6-lts-lgpl
v6.2.7-lts-lgpl
v6.2.8-lts-lgpl
v6.2.9-lts-lgpl
v6.5.0-beta1
v6.5.0-beta2
v6.5.0-beta3
v6.5.4-lts-lgpl
v6.5.6-lts-lgpl
v6.7.0-beta1
v6.7.0-beta2
v6.7.0-beta3