CVE-2023-34312: Tencent Qq

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate pointers from inter-process communication, which leads to a write-what-where condition.

Affected products

• Tencent Qq: from 9.7.1.28940, up to and including 9.7.8.29039
• Tencent Tim: from 3.4.5.22071, up to and including 3.4.7.22084

Published 2023-06-01. Last modified 2026-06-17.