Advisories · Technology
Qt.
Every CVE that names Qt among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 1.7 Low
Integer truncation vulnerability in QTextCodec conversion functions impacts Qt Framework
- Qt
- CWE-197
- CVSS 6.7 Medium
Out-of-bounds read vulnerability in CoAP message parsing impacts Qt CoAP
- Qt
- Memory corruption
- CVSS 1.9 Low
Integer overflow vulnerability in XML parsing functionality of Qt5Compat impacts Qt
- qt
- Memory corruption
- CVSS 2.3 Low
Memory corruption vulnerability in QMqttClient impacts Qt MQTT
- Qt
- Memory corruption
- CWE-129
- CVSS 4.3 Medium
NULL pointer dereference vulnerability in QCborValue to JSON conversion impacts Qt
- Qt
- Memory corruption
- CVSS 1.9 Low
Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt
- Qt
- Memory corruption
- CVSS 4.3 Medium
Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt
- Qt
- Memory corruption
- CVSS 5.3 Medium
Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt
- qt
- Memory corruption
- CVSS 2.0 Low
Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework
- Qt
- Memory corruption
- CVSS 2.1 Low
Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt
- qt
- Memory corruption
- CVSS 2.1 Low
Use-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts Qt
- qt
- Memory corruption
- CVSS 8.7 High
Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt
- qt
- Denial of service
- CVSS 4.0 Medium
Null-pointer dereference in QTriangulator reachable through VectorImage
- Qt
- Memory corruption
- CVSS 4.3 Medium
QBinaryJson::fromBinaryData() integer overflow leading to OOB read
- qt
- Memory corruption
- CVSS 7.1 High
Denial-of-service vulnerability in the SVG parser and renderer impacts Qt
- qt
- Denial of service
- CVSS 4.5 Medium
Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module
- qt
- Authentication bypass
- CVSS 2.3 Low
Denial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts Qt
- qt
- Denial of service
- CVSS 0.6 Low
Out-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt Quick
- qt
- Memory corruption
- CVSS 4.6 Medium
Out-of-bounds read (buffer over-read) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework (QtNetwork module)
- qt
- Memory corruption
- CWE-197
- CVSS 7.1 High
Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qt
- qt
- Denial of service
- CVSS 6.9 Medium
Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC module
- qt
- Memory corruption
- CVSS 7.1 High
Uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml)
- qt
- Denial of service
- CVSS 2.9 Low
XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization
- Qt
- Other injection
- CVSS 6.3 Medium
Out-of-bounds read in QTextCodec::codecForName() in Qt
- Qt
- Memory corruption
- CVSS 1.8 Low
Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading
- Qt
- CWE-427
- CVSS 8.7 High
Type confusion and heap-buffer-overflow in Qt SVG marker handling causing application crash
- Qt
- Memory corruption
- CVSS 7.4 High
Possible QML code injection in VectorImage component
- Qt
- Code injection
- CWE-20
- CVSS 8.7 High
Improper validation of <img> tag size in Text component parser
- Qt
- Denial of service
- CWE-1284
- CVSS 3.1 Low
Out-of-bounds read in Qt
- Qt
- Memory corruption
- CVSS 9.2 CriticalCritical · CVSS 9+
Possible denial of service with multiple incoming connections to a Schannel based server with a TLS backend
- Qt
- CWE-459
- CVSS 9.4 CriticalCritical · CVSS 9+
Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG
- Qt
- Memory corruption
- CVSS 9.4 CriticalCritical · CVSS 9+
Uncontrolled recursion in Qt SVG module
- Qt
- Denial of service
- CVSS 2.3 Low
Passing values outside of expected range to QColorTransferGenericFunction can cause a denial of service
- Qt
- CWE-20
- CVSS 2.1 Low
Use after free in QHttp2ProtocolHandler
- Qt
- Memory corruption
- CVSS 5.1 Medium
Resource allocation without limits in Qt
- Qt
- Denial of service
- CVSS 8.4 High
Possible denial of service when passing malformed data in a URL to qDecodeDataUrl
- Qt
- CWE-20
- CVSS 7.3 High
Improper Link Resolution Before File Access in QFileSystemEngine on Windows
- Qt
- Path traversal
- CVSS 4.8 Medium
Buffer overflow in QTextMarkdownImporter
- Qt
- Memory corruption
- CVSS 5.8 Medium
Inefficient algorithmic complexity in Qt
- Qt
- Denial of service
- CVSS 8.8 High
Integer overflow in Qt
- Qt
- Memory corruption
- CVSS 8.8 High
Heap-based buffer overflow in Qt
- Qt
- Memory corruption
-
Out-of-bounds read in qt
- qt
- Memory corruption