Vulnerability Details CVE-2023-34312
In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate pointers from inter-process communication, which leads to a write-what-where condition.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.035
EPSS Ranking 87.1%
CVSS Severity
CVSS v3 Score 7.8
Products affected by CVE-2023-34312
-
cpe:2.3:a:tencent:qq:9.7.1.28940
-
cpe:2.3:a:tencent:qq:9.7.8.29039
-
cpe:2.3:a:tencent:tim:3.4.5.22071
-
cpe:2.3:a:tencent:tim:3.4.7.22084