{"action":"Upgrade qpdf to 11.9.1-r0 or later.","affected":[{"fixed":"11.9.1-r0","introduced":"0"}],"component":"qpdf","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.23","exploited":false,"fixed_versions":["11.9.1-r0"],"id":"tcs_01M6GHTS9DE8DWCD1H1FS4K3AV","modified_at":"2026-11-03T06:32:05.884814920Z","published_at":"2024-02-29T20:15:41.407Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2024-24246","https://security.alpinelinux.org/vuln/CVE-2024-24246"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2024-24246#Alpine:v3.23/qpdf","url":"https://osv.dev/vulnerability/ALPINE-CVE-2024-24246"}],"summary":"Heap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via the std::__shared_count() function at /bits/shared_ptr_base.h."}