3.7
CVE-2024-58249
- EPSS 0.5%
- Veröffentlicht 16.04.2025 00:00:00
- Zuletzt bearbeitet 15.04.2026 00:35:42
- Erkennungen
In wxWidgets before 3.2.7, a crash can be triggered in wxWidgets apps when connections are refused in wxWebRequestCURL.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerwxWidgets
≫
Produkt
wxWidgets
Default Statusunaffected
Version
0
Version <
3.2.7
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.5% | 0.395 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| MITRE | 3.7 | 2.2 | 1.4 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
|
CWE-826 Premature Release of Resource During Expected Lifetime
The product releases a resource that is still intended to be used by itself or another actor.
https://github.com/wxWidgets/wxWidgets/issues/24885
https://github.com/wxWidgets/wxWidgets/commit/f2918a9ac823074901ce27de939baa57788beb3d
https://github.com/wxWidgets/wxWidgets/compare/v3.2.6...v3.2.7