CVE-2023-24607
Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13 6.x before 6.2.8 and 6.3.x before 6.4.3.
CVSS score
7.5
EPSS probability
%1.3
Risk score
0.1
Published
3 y ago
Vulnerability Timeline (Change History)
CVE-2023-24607 historical changes made to the vulnerability by NVD, CISA and MITRE:
| Date | Actor / Source | Action / Description | Type | Previous value | New value |
|---|---|---|---|---|---|
| 29.10.2026 | nvd@nist.gov | Initial Analysis & CVSS Vector Assignment | CVSS V3.1 | — | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| 11.04.2023 | CISA Coordinator | SSVC Risk Re-assessment | SSVC / KEV | exploitation: none | exploitation: none |
| 11.04.2023 | MITRE / NVD | New CVE Record Received & Ingested | CVE Created | — | CVE-2023-24607 |
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-24607"