Search CVE reports
1 – 10 of 48 results
(QDomDocument XML parsing is vulnerable to a remotely-triggerable denia ...)
2 affected packages
qt6-base, qtbase-opensource-src
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qt6-base | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
| qtbase-opensource-src | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
(Uncontrolled recursion (CWE-674) in the QDomDocument/QDomNode serializ ...)
2 affected packages
qt6-base, qtbase-opensource-src
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qt6-base | Not affected | Needs evaluation | Needs evaluation | — | — |
| qtbase-opensource-src | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
Improper output neutralization (XML injection) in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted text serialized by an application into those nodes to inject...
3 affected packages
qt4-x11, qt6-base, qtbase-opensource-src
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qt4-x11 | Not in release | Not in release | Not in release | — | Needs evaluation |
| qt6-base | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
| qtbase-opensource-src | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
An out-of-bounds read (buffer over-read) vulnerability exists in QTextCodec::codecForName() in Qt. When the function is called with a QByteArray that is not NUL-terminated (for example, one created with QByteArray::fromRawData()),...
2 affected packages
qt6-5compat, qtbase-opensource-src
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qt6-5compat | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
| qtbase-opensource-src | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a rogue CA certificate as a trusted system authority via a crafted...
3 affected packages
qt6-base, qtbase-opensource-src, qtbase-opensource-src-gles
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qt6-base | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
| qtbase-opensource-src | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| qtbase-opensource-src-gles | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
There is a "Use After Free" vulnerability in Qt's QHttp2ProtocolHandler in the QtNetwork module. This only affects HTTP/2 handling, HTTP handling is not affected by this at all. This happens due to a race condition between how...
3 affected packages
qt6-base, qtbase-opensource-src-gles, qtbase-opensource-src
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qt6-base | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
| qtbase-opensource-src-gles | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
| qtbase-opensource-src | Not affected | Not affected | Not affected | Not affected | Not affected |
An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. If the function was called with malformed data, for example, an URL...
3 affected packages
qt6-base, qtbase-opensource-src-gles, qtbase-opensource-src
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qt6-base | Needs evaluation | Needs evaluation | Needs evaluation | Not in release | — |
| qtbase-opensource-src-gles | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
| qtbase-opensource-src | Not affected | Ignored | Ignored | Ignored | Ignored |
Improper Link Resolution Before File Access ('Link Following') vulnerability in QFileSystemEngine in the Qt corelib module on Windows which potentially allows Symlink Attacks and the use of Malicious Files. Issue originates from...
3 affected packages
qt6-base, qtbase-opensource-src, qtbase-opensource-src-gles
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qt6-base | Needs evaluation | Needs evaluation | Needs evaluation | Not in release | — |
| qtbase-opensource-src | Ignored | Ignored | Ignored | Ignored | Ignored |
| qtbase-opensource-src-gles | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
There is a Heap-based Buffer Overflow vulnerability in QTextMarkdownImporter. This requires an incorrectly formatted markdown file to be passed to QTextMarkdownImporter to trigger the overflow. This issue affects Qt from 6.8.0 to...
3 affected packages
qt6-base, qtbase-opensource-src-gles, qtbase-opensource-src
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qt6-base | Needs evaluation | Needs evaluation | Needs evaluation | Not in release | — |
| qtbase-opensource-src-gles | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
| qtbase-opensource-src | Not affected | Not affected | Not affected | Not affected | Not affected |
encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts of a string (with relocation of later data).
3 affected packages
qtbase-opensource-src, qtbase-opensource-src-gles, qt6-base
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qtbase-opensource-src | Ignored | Ignored | Ignored | Ignored | Ignored |
| qtbase-opensource-src-gles | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
| qt6-base | Not affected | Needs evaluation | Needs evaluation | Not in release | — |