117 matches found
Qt 6.8.x < 6.8.10 / 6.9.0 < 6.11.3 Multiple Vulnerabilities
The version of Qt installed on the remote host is 6.8.x prior to 6.8.10, or 6.9.0 or later prior to 6.11.3. It is, therefore, affected by multiple vulnerabilities: - A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RSTSTREAM on a completed stream, planting a null pointer...
[SECURITY] Fedora 45 Update: kpipewire-6.8.1-1.fc45
It is developed in C++ and it's main use target is QML components. As it's what's been useful, this framework focuses on graphical PipeWire features. If it was necessary, these could be included. At the moment we offer two main components: - KPipeWire: offers the main components to connect to and...
[SECURITY] Fedora 45 Update: kosmindoormap-26.08.2-2.fc45
A library and QML component for rendering multi-level OSM indoor maps of for example a large train station...
False-Alarm Improvements and Detection Trade-Offs in QML Intrusion Detection: A Secondary Analysis of the Kaissar Corpus
Published results in quantum machine learning for intrusion detection QML-IDS require joint interpretation of false-positive rate FPR, attack true-positive rate TPR, and evaluation provenance. We reconstruct operating points in the 25-entry frame selected by Kaissar and colleagues: 21 included...
SUSE CVE-2026-105923
A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...
CVE-2026-105923
A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...
DEBIAN-CVE-2026-105923
A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...
UBUNTU-CVE-2026-105923
A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...
CVE-2026-105923
A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...
CVE-2026-105923 Null-pointer dereference in QTriangulator reachable through VectorImage
A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...
CVE-2026-105923
A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...
EUVD-2026-107159
A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...
CVE-2026-105923
The VectorImage QML Type is vulnerable to a null-pointer dereference caused by an integer overflow . This issue can be triggered by processing a malicious SVG file, which leads to an impact on availability . No specific exploit details or remediation versions are provided in the documents.
Linux Distros Unpatched Vulnerability : CVE-2026-105923
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type. CVE-2026-105923 Note that Nessus reli...
PT-2026-120510
A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...
Qt numeric error vulnerability
A security vulnerability exists in Qt versions from 6.8.0 up to and including 6.8.9, as well as from 6.9.0 up to and including 6.11.3. This vulnerability arises because malicious SVG files can trigger an integer overflow, resulting in a null pointer dereference in VectorImage QML Type...
Rocky Linux 10.2 [CIQ] Security Update: qt6-qtdeclarative / qt6-qtdeclarative-debuginfo / etc (crlsa-2026_20567)
The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202620567 advisory. qt: Qt SVG: Arbitrary QML/JavaScript code injection via malicious SVG file CVE-2025-14576 Tenable has extracted the preceding description block directly from th...
Malicious code in @zalastax/nolb-qml (npm)
The package @zalastax/nolb-qml was found to contain malicious code. --- Credit: OpenSSF source...
acquantum-qiskit (>=0.0.1, <=0.0.3), dc-qiskit-qml (0.0.2) +1 more potentially affected by CVE-2025-2000 via qiskit (0.7.0)
qiskit PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on qiskit and may be impacted: - acquantum-qiskit =0.0.1, =0.0.2.dev9, =0.0.2.dev10 Source cves: CVE-2025-2000 Source advisory: OSV:PYSEC-2026-510...
qtdeclarative: Qt SVG: Arbitrary QML/JavaScript code injection via malicious SVG file
A flaw was found in the Qt SVG module and the VectorImage component in Qt Quick. This vulnerability allows a remote attacker to inject arbitrary QML/JavaScript code by tricking a user into loading a specially crafted malicious SVG file. Successful exploitation could lead to denial of service,...