233 matches found
qt: XML entity expansion vulnerability
An XML Entity Expansion flaw was found in the QT library. Applications that use QT to load untrusted images, for example, SVG images, or untrusted XML documents, may be vulnerable to this flaw. This flaw allows an attacker to cause a denial of service...
DEBIAN-CVE-2020-17507
An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1. readxbmbody in gui/image/qxbmhandler.cpp has a buffer over-read...
DEBIAN-CVE-2020-13962
Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial of service to QSslSocket users. Because errors leak in unrelated TLS sessions, an unrelated session may be disconnected when any handshake fails...
Digia Qt Denial of Service Vulnerability
Digia Qt is a cross-platform C++ application development framework from Digia Finland. The framework can be used to develop GUI programs.Mumble is a set of voice communication tools for games. This tool allows players to play the game while having real-time voice communication. A security...
qt5-qtbase: QImage allocation failure in qgifhandler
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault...
qt5-qtbase: QBmpHandler segmentation fault on malformed BMP file
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data...
qt5-qtbase: Double free in QXmlStreamReader
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document...
Digia Qt Resource Management Error Vulnerability
Digia Qt is a cross-platform C++ application development framework from Digia Finland. The framework can be used to develop GUI programs. A security vulnerability exists in Qt 5.14.1 and earlier versions. An attacker can exploit the vulnerability to cause a denial of service memory consumption...
DEBIAN-CVE-2018-21035
In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service memory consumption...
UBUNTU-CVE-2018-21035
In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service memory consumption...
DEBIAN-CVE-2015-9541
Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564...
qt5-qtbase: QBmpHandler segmentation fault on malformed BMP file
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data...
qt5-qtbase: Double free in QXmlStreamReader
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document...
Qt qtbase Buffer Overflow Vulnerability
Qt is a cross-platform C++ graphical user interface application development framework developed by the Qt Company in 1991. A buffer error vulnerability exists in the 'generateDirectionalRuns' function of the qtextengine.cpp file in Qt qtbase. The vulnerability stems from a network system or produ...
DEBIAN-CVE-2019-18281
An out-of-bounds memory access in the generateDirectionalRuns function in qtextengine.cpp in Qt qtbase 5.11.x and 5.12.x before 5.12.5 allows attackers to cause a denial of service by crashing an application via a text file containing many directional characters...
qt5-qtsvg: Invalid parsing of malformed url reference resulting in a denial of service
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp...
CVE-2019-11351
TeamSpeak 3 Client before 3.2.5 allows remote code execution in the Qt framework...
CVE-2019-11351
TeamSpeak 3 Client before 3.2.5 allows remote code execution in the Qt framework...
