{ "id": "CVE-2023-34312", "sourceIdentifier": "cve@mitre.org", "published": "2023-06-01T03:15:20.673", "lastModified": "2023-06-01T13:00:30.717", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate pointers from inter-process communication, which leads to a write-what-where condition." } ], "metrics": {}, "references": [ { "url": "https://github.com/vi3t1/qq-tim-elevation", "source": "cve@mitre.org" } ] }