MEDIUM 5.9 Microsoft

CVE-2024-39936

An issue was discovered in HTTP2 in Qt before 5.15.18 6.x before 6.2.13 6.3.x through 6.5.x before 6.5.7 and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early because the encrypted() signal has not yet been emitted and processed..

Microsoft Security Update 2024-Jul: An issue was discovered in HTTP2 in Qt before 5.15.18 6.x before 6.2.13 6.3.x through 6.5.x before 6.5.7 and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early because the encrypted() signal has not yet been emitted and processed..

Affected Products

References

Published: 2024-07-09 · Source: Microsoft · Feed updated: 2026-10-01
This medium severity vulnerability with a CVSS score of 5.9 was published on 2024-07-09 via Microsoft. Affected: cbl2 qt5-qtbase 5.12.11-13 on CBL Mariner 2.0, azl3 qtbase 6.6.2-1 on Azure Linux 3.0, azl3 qtbase 6.6.1-1 on Azure Linux 3.0 and 1 more.
vulnfeed aggregates 12641 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.