USN-7780-1: qtbase-opensource-src Ubuntu
Vulnerability summary
USN-7780-1 is a vulnerability in qtbase-opensource-src Ubuntu with no CVSS score yet.
Advisory lineage
Upstream 4 · Downstream 0 · Related 4Timeline
- 28-09-2025PublishedVulnerability first disclosed.
- 25-06-2026Last modifiedVulnerability information updated.
Description
qtbase-opensource-src vulnerabilities It was discovered that Qt did not correctly handle certain inputs when using the SQL ODBC driver plugin. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-24607) It was discovered that Qt did not correctly parse certain strict-transport- security headers. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-32762) It was discovered that Qt did not correctly handle certain inputs from DNS servers. A remote attacker could possibly use this issue to execute arbitrary code or cause a denial of service. (CVE-2023-33285) It was discovered that Qt did not correctly validate certain CA certificates for TLS. An attacker could possibly use this issue to gain access to unauthorized resources. (CVE-2023-34410)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu1 product
- qtbase-opensource-src< 5.5.1+dfsg-16ubuntu7.7+esm1 | < 5.9.5+dfsg-0ubuntu2.6+esm1 | < 5.12.8+dfsg-0ubuntu2.1+esm1 | < 5.15.3+dfsg-2ubuntu0.2+esm1
1 vendor · 1 product