Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2022-40983
HistoryJan 12, 2023 - 5:15 p.m.

CVE-2022-40983

2023-01-1217:15:09
Debian Security Bug Tracker
security-tracker.debian.org
12
integer overflow
qt project
qml qtscript reflect api
arbitrary code execution
memory allocation
javascript code
web page
cve-2022-40983
unix

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.003 Low

EPSS

Percentile

67.9%

JSON

An integer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted javascript code can trigger an integer overflow during memory allocation, which can lead to arbitrary code execution. Target application would need to access a malicious web page to trigger this vulnerability.

OSVersionArchitecturePackageVersionFilename
Debian12allqt6-declarative< 6.4.2+dfsg~rc1-2qt6-declarative_6.4.2+dfsg~rc1-2_all.deb
Debian999allqt6-declarative< 6.4.2+dfsg~rc1-2qt6-declarative_6.4.2+dfsg~rc1-2_all.deb
Debian13allqt6-declarative< 6.4.2+dfsg~rc1-2qt6-declarative_6.4.2+dfsg~rc1-2_all.deb
Debian12allqtdeclarative-opensource-src<= 5.15.8+dfsg-3qtdeclarative-opensource-src_5.15.8+dfsg-3_all.deb
Debian11allqtdeclarative-opensource-src<= 5.15.2+dfsg-6qtdeclarative-opensource-src_5.15.2+dfsg-6_all.deb
Debian10allqtdeclarative-opensource-src<= 5.11.3-4qtdeclarative-opensource-src_5.11.3-4_all.deb
Debian999allqtdeclarative-opensource-src<= 5.15.13+dfsg-2qtdeclarative-opensource-src_5.15.13+dfsg-2_all.deb
Debian13allqtdeclarative-opensource-src<= 5.15.13+dfsg-2qtdeclarative-opensource-src_5.15.13+dfsg-2_all.deb
Debian12allqtdeclarative-opensource-src-gles<= 5.15.8+dfsg-1qtdeclarative-opensource-src-gles_5.15.8+dfsg-1_all.deb
Debian11allqtdeclarative-opensource-src-gles<= 5.15.2+dfsg-2qtdeclarative-opensource-src-gles_5.15.2+dfsg-2_all.deb
Rows per page:
1-10 of 121

Related

prion 1
ubuntucve 1
cvelist 1
nvd 1
talos 1
cve 1
osv 1
talosblog 1
qt 1
prion
prion
Integer overflow
2023-01-12 17:15:00
ubuntucve
ubuntucve
CVE-2022-40983
2023-01-12 00:00:00
cvelist
cvelist
CVE-2022-40983
2023-01-12 16:44:11
nvd
nvd
CVE-2022-40983
2023-01-12 17:15:09
talos
talos
Qt Project Qt QML QtScript Reflect API integer overflow vulnerability
2023-01-12 00:00:00
cve
cve
CVE-2022-40983
2023-01-12 17:15:09
osv
osv
CVE-2022-40983
2023-01-12 17:15:09
talosblog
talosblog
Vulnerability Spotlight: Integer and buffer overflow vulnerabilities found in QT QML
2023-01-13 16:58:03
qt
qt
Regarding recent reported security vulnerabilities from Cisco Talos
2023-01-23 00:00:00

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.003 Low

EPSS

Percentile

67.9%

JSON
Related for DEBIANCVE:CVE-2022-40983
prion1ubuntucve1cvelist1nvd1talos1cve1osv1talosblog1qt1