3.7
CVE-2024-58249
- EPSS 0.44%
- Veröffentlicht 16.04.2025 00:00:00
- Zuletzt bearbeitet 15.04.2026 00:35:42
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
In wxWidgets before 3.2.7, a crash can be triggered in wxWidgets apps when connections are refused in wxWebRequestCURL.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerwxWidgets
≫
Produkt
wxWidgets
Default Statusunaffected
Version
0
Version <
3.2.7
Status
affected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.44% | 0.348 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| cve@mitre.org | 3.7 | 2.2 | 1.4 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
|
CWE-826 Premature Release of Resource During Expected Lifetime
The product releases a resource that is still intended to be used by itself or another actor.
https://github.com/wxWidgets/wxWidgets/issues/24885
https://github.com/wxWidgets/wxWidgets/commit/f2918a9ac823074901ce27de939baa57788beb3d
https://github.com/wxWidgets/wxWidgets/compare/v3.2.6...v3.2.7