Fedora: Security Advisory for qt5-qtbase (FEDORA-2020-3069e44be5)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

qt: Malformed PPM image causing division by zero and crash in qppmhandler.cpp

An issue was discovered in Qt 5.11. A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp...

qt5-qtsvg: Invalid parsing of malformed url reference resulting in a denial of service

An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp...

qt:qtbase_gui_painting_qcolorspace_fromiccprofile: Heap-buffer-overflow in QSpecialInteger<QBigEndianStorageType<unsigned int> >::operator unsigned int

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=5699424467812352 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtbaseguipaintingqcolorspacefromiccprofile Job Type: libfuzzerasani386qt Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

WS-2020-0346

The moudle qt5 in qt in versions from v5.14.0-beta1 to v5.14.0-beta3, v5.14.0-rc1 to v5.14.0-rc2, v5.14.0 to v5.14.2;v5.15.0-alpha1 and v5.15.0-beta1 to v5.15.0-beta4 is vulnerable to heap-buffer-overflow related to file src/gui/painting/qicc.cpp...

CVE-2020-12267

setMarkdown in Qt before 5.14.2 has a use-after-free related to QTextMarkdownImporter::insertBlock...

CVE-2020-12267

setMarkdown in Qt before 5.14.2 has a use-after-free related to QTextMarkdownImporter::insertBlock...

CVE-2020-12267

setMarkdown in Qt before 5.14.2 has a use-after-free related to QTextMarkdownImporter::insertBlock...

CVE-2020-12267

setMarkdown in Qt before 5.14.2 has a use-after-free related to QTextMarkdownImporter::insertBlock...

CVE-2020-12267

setMarkdown in Qt before 5.14.2 has a use-after-free related to QTextMarkdownImporter::insertBlock...

CVE-2020-12267

The CVE-2020-12267 issue affects QtGui: setMarkdown in Qt before 5.14.2, with a use-after-free in QTextMarkdownImporter::insertBlock. The connected Gentoo GLSA confirms a remote-executable code path or Denial of Service risk if exploited, dependent on the QtGui version. Remediation is to upgrade ...

CVE-2020-12267

setMarkdown in Qt before 5.14.2 has a use-after-free related to QTextMarkdownImporter::insertBlock...

CVE-2020-12267: Use After Free

setMarkdown in Qt before 5.14.2 has a use-after-free related to QTextMarkdownImporter::insertBlock...

PT-2020-13085

Name of the Vulnerable Software and Affected Versions Qt versions prior to 5.14.2 Description The issue is related to a use-after-free in the setMarkdown function, specifically concerning QTextMarkdownImporter::insertBlock. Recommendations For Qt versions prior to 5.14.2, update to version 5.14.2...

[SECURITY] Fedora 31 Update: qt5-qtbase-5.13.2-3.fc31

Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...

[SECURITY] Fedora 32 Update: qt5-qtbase-5.13.2-5.fc32

Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...

Scientific Linux Security Update : qt on SL7.x x86_64 (20200407)

qt5-qtbase: Double free in QXmlStreamReader qt: Malformed PPM image causing division by zero and crash in qppmhandler.cpp qt5-qtsvg: Invalid parsing of malformed url reference resulting in a denial of service qt5-qtbase: QImage allocation failure in qgifhandler qt5-qtimageformats: QTgaFile CPU...

Shenzhen Tencent Computer System Co., Ltd. QT Voice suffers from dll hijacking vulnerability

QT Voice Tencent voice chat tool is a team voice communication tool that supports multi-person voice communication. Shenzhen Tencent Computer Systems Limited QT voice dll hijacking vulnerability, an attacker can exploit the vulnerability in the client process to inject executable DLL file, to...

Huawei EulerOS: Security Advisory for qt (EulerOS-SA-2020-1431)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : qt (EulerOS-SA-2020-1431)

According to the version of the qt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to...