Vulnerabilities (CVE)

Filtered by vendor Qt Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-45930 3 Debian, Fedoraproject, Qt 3 Debian Linux, Fedora, Qtsvg 2023-08-23 4.3 MEDIUM 5.5 MEDIUM
Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend (called from QPainterPath::addPath and QPathClipper::intersect).
CVE-2023-32573 2 Qt, Redhat 2 Qt, Enterprise Linux 2023-08-23 N/A 6.5 MEDIUM
In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont m_unitsPerEm initialization is mishandled.
CVE-2023-34410 1 Qt 1 Qt 2023-08-23 N/A 5.3 MEDIUM
An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2. Certificate validation for TLS does not always consider whether the root of a chain is a configured CA certificate.
CVE-2021-28025 1 Qt 1 Qt 2023-08-21 N/A 5.5 MEDIUM
Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attackers to cause a denial of service (DoS).
CVE-2015-8079 1 Qt 1 Qtwebkit 2021-08-31 5.0 MEDIUM 5.3 MEDIUM
qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db.
CVE-2018-19869 2 Opensuse, Qt 2 Leap, Qt 2020-11-02 4.3 MEDIUM 6.5 MEDIUM
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
CVE-2020-17507 2 Fedoraproject, Qt 2 Fedora, Qt 2020-09-30 5.0 MEDIUM 5.3 MEDIUM
An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1. read_xbm_body in gui/image/qxbmhandler.cpp has a buffer over-read.
CVE-2018-19872 3 Fedoraproject, Opensuse, Qt 3 Fedora, Leap, Qt 2020-09-28 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in Qt 5.11. A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp.
CVE-2018-19871 2 Opensuse, Qt 2 Leap, Qt 2020-09-28 4.3 MEDIUM 6.5 MEDIUM
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
CVE-2019-18281 2 Debian, Qt 2 Debian Linux, Qtbase 2020-02-18 4.3 MEDIUM 4.3 MEDIUM
An out-of-bounds memory access in the generateDirectionalRuns() function in qtextengine.cpp in Qt qtbase 5.11.x and 5.12.x before 5.12.5 allows attackers to cause a denial of service by crashing an application via a text file containing many directional characters.
CVE-2017-10905 1 Qt 1 Qt 2019-10-03 6.8 MEDIUM 5.3 MEDIUM
A vulnerability in applications created using Qt for Android prior to 5.9.3 allows attackers to alter environment variables via unspecified vectors.
CVE-2016-10040 1 Qt 1 Qxmlsimplereader 2017-03-08 4.3 MEDIUM 5.5 MEDIUM
Stack-based buffer overflow in QXmlSimpleReader in Qt 4.8.5 allows remote attackers to cause a denial of service (application crash) via a xml file with multiple nested open tags.