CVE-2024-39936

—

CVSS 3.1

5.9 medium

EPSS

<1%p41

Published

Jul 4, 2024 (Jul 4, 2024)

Modified

Jun 17, 2026

Description

An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted() signal has not yet been emitted and processed..

Vendors: qt
Products: qt
Weakness: CWE-367
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.