Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Qt
(Qt)Repositories |
Unknown: This might be proprietary software. |
#Vulnerabilities | 52 |
Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2018-12-26 | CVE-2018-19869 | An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp. | Leap, Qt | 6.5 | ||
2020-02-28 | CVE-2018-21035 | In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service (memory consumption). | Qt | N/A | ||
2017-12-16 | CVE-2017-10905 | A vulnerability in applications created using Qt for Android prior to 5.9.3 allows attackers to alter environment variables via unspecified vectors. | Qt | 5.3 | ||
2017-10-04 | CVE-2017-15011 | The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service (application crash) via an unspecified string. | Qt | 7.5 | ||
2018-12-26 | CVE-2018-19873 | An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data. | Debian_linux, Leap, Qt | 9.8 | ||
2018-12-26 | CVE-2018-19870 | An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault. | Debian_linux, Leap, Qt | 8.8 | ||
2018-12-26 | CVE-2018-15518 | QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document. | Debian_linux, Leap, Qt | 8.8 | ||
2018-12-26 | CVE-2018-19871 | An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption. | Leap, Qt | 6.5 | ||
2018-12-05 | CVE-2018-19865 | A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3. | Leap, Qt | 7.5 | ||
2017-12-16 | CVE-2017-10904 | Qt for Android prior to 5.9.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors. | Qt | 9.8 |