Qt 安全漏洞

Qt is a cross-platform C++ application development framework from the Norwegian company Qt. It is widely used to develop GUI programs, in which case it is also known as the widget toolkit. It can also be used to develop non-GUI programs, such as console tools and servers. A security vulnerability...

MagicRAT: Lazarus’ latest gateway into victim networks

By Jung soo An, Asheer Malhotra and Vitor Ventura. Cisco Talos has discovered a new remote access trojan RAT we're calling "MagicRAT," developed and operated by the Lazarus APT group, which the U.S. government believes is a North Korean state-sponsored actor. Lazarus deployed MagicRAT after the...

DEBIAN-CVE-2021-3481

A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in qt/qtbase/src/gui/painting/qdrawhelperp.h in Qt/Qtbase. While rendering and displaying a crafted Scalable Vector Graphics SVG file this flaw may lead to an unauthorized memory access. The highest threat...

The vulnerability of the Qt5Core.dll library, a cross-platform framework for developing Qt software, allows an attacker to execute arbitrary code.

The vulnerability of the Qt5Core.dll library, a cross-platform framework for developing Qt software, is related to an uncontrolled search path element. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Qt path traversal vulnerability

Qt is a cross-platform C application development framework from the Norwegian company Qt. It is widely used for developing GUI programs, in which case it is also known as the widget toolkit. It can also be used to develop non-GUI programs, such as console tools and servers.Qt versions prior to...

UBUNTU-CVE-2022-25634

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory...

The vulnerability of the qt/qtbase package from the Qt library, which allows a hacker to execute arbitrary code.

The vulnerability of the qt/qtbase package from the Qt library is related to an incorrect limitation on the path to the restricted directory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2022-25255

In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not found in the PATH...

GHSA-CH22-X2V3-V6VQ OTF-001: Improper Input Sanitation: The path parameter of the requested URL is not sanitized before being passed to the QT frontend

Between September 26, 2021 and October 8, 2021, Radically Open Security conducted a penetration test of OnionShare 2.4, funded by the Open Technology Fund's Red Team lab. This is an issue from that penetration test. - Vulnerability ID: OTF-001 - Vulnerability type: Improper Input Sanitization -...

qt: Out of bounds read in function QRadialFetchSimd from crafted svg file

A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in qt/qtbase/src/gui/painting/qdrawhelperp.h in Qt/Qtbase. While rendering and displaying a crafted Scalable Vector Graphics SVG file this flaw may lead to an unauthorized memory access. The highest threat...

In Qt through 5.14.1 the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service (memory consumption).

...

CVE-2021-38593

Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath called from QRasterPaintEngine::fill and QPaintEngineEx::stroke...

An issue was discovered in Qt through 5.12.9 and 5.13.x through 5.15.x before 5.15.1. read_xbm_body in gui/image/qxbmhandler.cpp has a buffer over-read.

...

The vulnerability of the qppmhandler.cpp component of the cross-platform development framework for Qt software, related to division by zero, allows attackers to trigger a service failure.

The vulnerability of the qppmhandler.cpp component of the cross-platform framework for developing Qt software is related to division by zero. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a distorted PPM image...

The vulnerability of the QTgaFile component of the cross-platform software development framework for Qt, related to a resource management mechanism error, allows attackers to trigger a service failure.

The vulnerability of the QTgaFile component of the cross-platform software development framework for Qt is related to a bug in the resource management mechanism. Exploiting this vulnerability allows an attacker to cause service failures...

RdpCacheStitcher - RdpCacheStitcher Is A Tool That Supports Forensic Analysts In Reconstructing Useful Images Out Of RDP Cache Bitmaps

RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps. Using raw RDP cache tile bitmaps extracted by tools like e.g. ANSSI's BMC-Tools https://github.com/ANSSI-FR/bmc-tools as input, it provides a graphical user interface and several...

PT-2021-8283

Name of the Vulnerable Software and Affected Versions Qt affected versions not specified Description A flaw was found in Qt, specifically an out-of-bounds read vulnerability in QRadialFetchSimd in qt/qtbase/src/gui/painting/qdrawhelper p.h. This issue may lead to unauthorized memory access when...

Exploit for CVE-2020-14882

CVE-2020-14882-GUI I just got started with the Qt framework...

qt: buffer over-read in read_xbm_body in gui/image/qxbmhandler.cpp

An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1. readxbmbody in gui/image/qxbmhandler.cpp has a buffer over-read...

qt5: incorrectly calls SSL_shutdown() in OpenSSL mid-handshake causing denial of service in TLS applications

Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial of service to QSslSocket users. Because errors leak in unrelated TLS sessions, an unrelated session may be disconnected when any handshake fails...