PT-2025-16788 · Wxwidgets+2 · Wxwidgets+2

Published 2025-04-16 · Updated 2025-08-03 · CVE-2024-58249

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions wxWidgets versions prior to 3.2.7

Description A crash can be triggered in wxWidgets apps when connections are refused in wxWebRequestCURL.

Recommendations For versions prior to 3.2.7, update to version 3.2.7 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-826

Related Identifiers

CVE-2024-58249

MGASA-2025-0217

OESA-2025-1504

OESA-2025-1505

OPENSUSE-SU-2025:15309-1

OPENSUSE-SU-2025_01735-1

SUSE-SU-2025:01735-1

Affected Products

Debian

Suse

Wxwidgets

References · 31

• https://security-tracker.debian.org/tracker/CVE-2024-58249 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01735-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-58249 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15309-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1505 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-58249 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1504 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-58249 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0217 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-58249 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-58249 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-58249 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0217.html · Security Note
• https://github.com/wxWidgets/wxWidgets/compare/v3.2.6...v3.2.7 · Note
• https://github.com/wxWidgets/wxWidgets/issues/24885 · Note