Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-24246

Fixed in a distro release EPSS <1%CVSS 5.5

Heap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via the std::__shared_count() function at /bits/shared_ptr_base.h.

Published 2024-02-29 · CVE record · OSV

Products: qpdf_project qpdf, fedoraproject fedora

Distro releases

ReleasePackageFixed in
Debian 12qpdfno fix
Debian 13qpdf11.9.0-1
Debian 14qpdf11.9.0-1
Ubuntu 23.10qpdf11.5.0-1ubuntu1.1
Ubuntu 24.04 LTSqpdf11.9.0-1