ROS-20250703-05

A vulnerability in the cross-platform software development framework Qt is related to the fact that QAbstractOAuth in Qt Network Authorization uses only time to run PRNG Exploitation of this vulnerability could allow an attacker acting remotely to bypass authentication. of the vulnerability could...

ROS-20250703-04

A vulnerability in the cross-platform software development framework Qt is related to the fact that QAbstractOAuth in Qt Network Authorization uses only time to run PRNG Exploitation of this vulnerability could allow an attacker acting remotely to bypass authentication. of the vulnerability could...

Astra Linux – Vulnerability in qtbase-opensource-src

A issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur due to a crafted KTX image file...

Qt: Multiple Vulnerabilities

Background Qt is a cross-platform application development framework. Description Multiple vulnerabilities have been discovered in Qt. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known...

[SECURITY] Fedora 42 Update: python-pyside6-6.9.1-1.fc42

PySide6 is the official Python module from the Qt for Python project, which provides access to the complete Qt 6+ framework...

Qt 资源管理错误漏洞

Qt is a cross-platform application development framework from the Qt open source. A resource management error vulnerability exists in Qt version 6.9.0, which stems from reuse after release and could lead to a race condition...

SUSE CVE-2025-5683

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1...

Qt 安全漏洞

Qt is a cross-platform application development framework from the Qt open source. A security vulnerability exists in Qt versions 6.3.0 through 6.5.9, 6.6.0 through 6.8.4, and 6.9.0, which originates from a crash triggered by loading a specially crafted ICNS format image file...

UBUNTU-CVE-2025-5455

An issue was found in the private API function qDecodeDataUrl in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. If the function was called with malformed data, for example, an URL that contained a "charset" parameter that lacked a value such as...

Qt 输入验证错误漏洞

Qt is a cross-platform application development framework from the Qt open source. An input validation error vulnerability exists in Qt versions 5.15.18 and earlier, 6.0.0 through 6.5.8, 6.6.0 through 6.8.3, and 6.9.0, which results in a denial of service when malformed data is processed by functi...

CVE-2019-11351

TeamSpeak 3 Client before 3.2.5 allows remote code execution in the Qt framework...

CVE-2017-15011

The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service application crash via an unspecified string...

CVE-2025-4211

A flaw was found in the QFileSystemEngine in the Qt corelib module on Windows. The vulnerability arises when using the GetTempPath API, which allows attackers to manipulate temporary file paths, potentially leading to unauthorized access and privilege escalation. The affected public API in the Qt...

CVE-2025-4211

Improper Link Resolution Before File Access 'Link Following' vulnerability in QFileSystemEngine in the Qt corelib module on Windows which potentially allows Symlink Attacks and the use of Malicious Files. Issue originates from CVE-2024-38081. The vulnerability arises from the use of the GetTempPa...

CVE-2025-4211 Improper Link Resolution Before File Access in QFileSystemEngine on Windows

Improper Link Resolution Before File Access 'Link Following' vulnerability in QFileSystemEngine in the Qt corelib module on Windows which potentially allows Symlink Attacks and the use of Malicious Files. Issue originates from CVE-2024-38081. The vulnerability arises from the use of the GetTempPa...

CVE-2025-4211 Improper Link Resolution Before File Access in QFileSystemEngine on Windows

Improper Link Resolution Before File Access 'Link Following' vulnerability in QFileSystemEngine in the Qt corelib module on Windows which potentially allows Symlink Attacks and the use of Malicious Files. Issue originates from CVE-2024-38081. The vulnerability arises from the use of the GetTempPa...

CVE-2025-4211

Qt: CVE-2025-4211 affects the Qt corelib QFileSystemEngine on Windows, via QDir::tempPath() (and uses like QStandardPaths/TempLocation, QTemporaryDir, QTemporaryFile). Root cause is improper link resolution before file access, enabling potential symlink attacks and malicious file handling. Affect...

The vulnerability of the QXmlStreamReader class in the cross-platform framework for Qt software development allows a attacker to cause a service failure.

The vulnerability of the QXmlStreamReader class in the cross-platform framework for Qt software development is related to an incorrect restriction on recursive references to entities in the DTD. Exploiting this vulnerability could allow a malicious actor to cause service failures...

OESA-2025-1386 qt5-qtbase security update

Qt is a software toolkit for developing applications. Security Fixes: encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts of a string with relocation of later data.CVE-2025-30348...

OESA-2025-1387 qt5-qtbase security update

Qt is a software toolkit for developing applications. Security Fixes: encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts of a string with relocation of later data.CVE-2025-30348...