Qt vulnerabilities, page 3
90 vulnerabilities
Known vulnerabilities in Qt products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 8 products.
CVE-2020-0570debianqtbase-opensource-src+2
EPSS score0.57%
Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access.CVE-2020-0569canonicalubuntu_linux+25EPSS score0.56%
Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentially enable denial of service via local access.CVE-2020-17507debianqtbase-opensource-src+71EPSS score3.99%
An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1. read_xbm_body in gui/image/qxbmhandler.cpp has a buffer over-read.CVE-2020-24742debianqtbase-opensource-src+4EPSS score1.17%
An issue has been fixed in Qt versions 5.14.0 where QPluginLoader attempts to load plugins relative to the working directory, allowing attackers to execute arbitrary code via crafted files.CVE-2020-12267qtqtEPSS score2.41%
setMarkdown in Qt before 5.14.2 has a use-after-free related to QTextMarkdownImporter::insertBlock.CVE-2014-0190canonicalubuntu_linux+8EPSS score3.96%
The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and height values in a GIF image.CVE-2022-40983debianqt6-declarative+4EPSS score1.08%
An integer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted javascript code can trigger an integer overflow during memory allocation, which can lead to arbitrary code execution. Target application would need to access a malicious web page to trigger this vulnerability.CVE-2022-25634ubuntuqtbase-opensource-src-gles+1EPSS score1.96%
Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.CVE-2022-25255debianqt6-base+12EPSS score0.33%
In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not found in the PATH.CVE-2022-43591debianqt6-declarative+4EPSS score1.14%
A buffer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted javascript code can trigger an out-of-bounds memory access, which can lead to arbitrary code execution. Target application would need to access a malicious web page to trigger this vulnerability.CVE-2012-5624canonicalubuntu_linux+2EPSS score1.94%
The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middle attackers to force the read of arbitrary local files and possibly obtain sensitive information via a file: URL to a QML application.CVE-2012-6093canonicalubuntu_linux+2EPSS score1.78%
The QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5, when using certain versions of openSSL, uses an "incompatible structure layout" that can read memory from the wrong location, which causes Qt to report an incorrect error when certificate validation fails and might cause users to make unsafe security decisions to accept a certificate.CVE-2011-3193canonicalubuntu_linux+16EPSS score7.25%
Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.CVE-2011-3194qtqtEPSS score6.95%
Buffer overflow in the TIFF reader in gui/image/qtiffhandler.cpp in Qt 4.7.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the TIFFTAG_SAMPLESPERPIXEL tag in a greyscale TIFF image with multiple samples per pixel.CVE-2010-2621debianqt4-x11+2EPSS score10.54%
The QSslSocketBackendPrivate::transmit function in src_network_ssl_qsslsocket_openssl.cpp in Qt 4.6.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a malformed request.CVE-2010-5076digiaqt+1EPSS score1.40%
QSslSocket in Qt before 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.CVE-2017-10904ubuntuqt4-x11+3EPSS score1.96%
Qt for Android prior to 5.9.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors.CVE-2017-10905ubuntuqt4-x11+3EPSS score0.58%
A vulnerability in applications created using Qt for Android prior to 5.9.3 allows attackers to alter environment variables via unspecified vectors.CVE-2017-15011qtqtEPSS score1.40%
The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service (application crash) via an unspecified string.CVE-2024-36048debianqt6-networkauth+12EPSS score0.97%
QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which may result in guessable values.