Qt vulnerabilities
89 vulnerabilities
Known vulnerabilities in Qt products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 8 products.
Products
8- Qt80 vulnerabilities
- Qt For Mcus3 vulnerabilities
- Axivion2 vulnerabilities
- Qtbase1 vulnerabilities
- Qtdeclarative1 vulnerabilities
- Qtsvg1 vulnerabilities
- Qtwebkit1 vulnerabilities
- Qxmlsimplereader1 vulnerabilities
CVE-2026-8168qtqtUncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements.CVE-2026-94370qtqt_for_mcus
EPSS score0.33%
A defect in the Qt for MCUs core string handling causes heap memory corruption. When an application passes text into Qt Quick Ultralite using the public Qul::String interface type, and that text is held in a std::string, the conversion to the internal string type copies the pointer without taking ownership of it. Two objects then release the same memory, producing a double free, an invalid free, or a use-after-free.CVE-2018-21035debianqtwebsockets-opensource-src+3EPSS score2.34%
In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service (memory consumption).CVE-2018-19872debianqtbase-opensource-src+5EPSS score1.38%
An issue was discovered in Qt 5.11. A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp.CVE-2018-19871debianqtimageformats-opensource-src+8EPSS score1.86%
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.CVE-2018-19865debianqtvirtualkeyboard-opensource-src+5EPSS score2.17%
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.CVE-2018-19873canonicalubuntu_linux+6EPSS score3.38%
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.CVE-2018-19869debianqtsvg-opensource-src+10EPSS score2.20%
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.CVE-2018-19870debianqtbase-opensource-src+4EPSS score2.42%
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.CVE-2018-15518debianqtbase-opensource-src+4EPSS score2.50%
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.CVE-2013-0254qtqt+12EPSS score0.43%
The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions (world-readable and world-writable) for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrated by reading a pixmap being sent to an X server.CVE-2013-4549debianqtbase-opensource-src+7EPSS score3.10%
QXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to cause a denial of service (memory consumption) via an XML Entity Expansion (XEE) attack.CVE-2021-38593ubuntuqtbase-opensource-src+22EPSS score3.00%
Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRasterPaintEngine::fill and QPaintEngineEx::stroke).CVE-2021-45930debianqtsvg-opensource-src+11EPSS score1.35%
Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend (called from QPainterPath::addPath and QPathClipper::intersect).CVE-2021-28025debianqtsvg-opensource-src+4EPSS score0.29%
Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attackers to cause a denial of service (DoS).CVE-2021-3481debianqtsvg-opensource-src+230EPSS score0.55%
A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in qt/qtbase/src/gui/painting/qdrawhelper_p.h in Qt/Qtbase. While rendering and displaying a crafted Scalable Vector Graphics (SVG) file this flaw may lead to an unauthorized memory access. The highest threat from this vulnerability is to data confidentiality and the application availability.CVE-2015-1290ubuntuoxide-qt+3EPSS score3.16%
The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted web site.CVE-2015-1860debianqtbase-opensource-src+5EPSS score8.67%
Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image.CVE-2015-1858debianqtbase-opensource-src+5EPSS score7.17%
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image.CVE-2015-1859debianqtbase-opensource-src+5EPSS score7.13%
Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image.