CVE-2015-1859

CVE-2015-1859 affects the QtBase module. It is due to multiple buffer overflows in the ICO image format handler (plugins/imageformats/ico/qicohandler.cpp). The vulnerability exists in Qt 4.x up to but not including 4.8.7, and in Qt 5.x up to but not including 5.4.2, allowing remote attackers to c...

CVE-2015-0295

CVE-2015-0295 affects the BMP decoding path in QtGui (Qt before 5.5). The BMP decoder fails to correctly calculate color masks, enabling a crafted BMP file to trigger a divide-by-zero and crash (remote denial of service). Connected sources (e.g., Qt/QtBase advisories and multiple Nessus entries) ...

CVE-2013-4549

CVE-2013-4549 affects QXmlSimpleReader in Qt prior to 5.2, where an XML Entity Expansion (XEE) attack can cause memory consumption leading to a denial of service. The initial record lists this CVE with a base CVSSv2 score of 5.0 (MEDIUM) and vectors AV:N/AC:L/Au:N/C:N/I:N/A:P, indicating network ...

CVE-2015-1858

CVE-2015-1858 affects QtBase’s BMP handling: multiple buffer overflow vulnerabilities in gui/image/qbmphandler.cpp allow remote denial of service and possible code execution via crafted BMP images. In affected products, the issue exists in Qt 4.8.x up to before 4.8.7 and in Qt 5.x up to before 5....

CVE-2015-1860

CVE-2015-1860 affects QtBase/QtGui: multiple buffer overflows in GIF handling (QGIFFormat::nextY) can trigger out-of-bounds memcpy, leading to Denial of Service or possibly arbitrary code execution. Affected: Qt 4.8.x before 4.8.7 and Qt 5.x before 5.4.2. Exploitation observed via crafted GIF ima...

CVE-2010-5076

Qt’s QSslSocket before 4.7.0-rc1 accepts wildcard IPs in the X.509 certificate subject CN, enabling potential MITM spoofing of SSL servers via certificates from trusted CAs. Affected: Qt Qt-based SSL/TLS implementations prior to 4.7.0-rc1. Root cause: improper hostname verification for wildcard I...

CVE-2010-1766

CVE-2010-1766 is an off-by-one vulnerability in WebKit’s WebCore component (WebSocketHandshake::readServerHandshake in WebSocketHandshake.cpp) prior to revision r56380, affecting WebKit builds used in Qt and related products. An overly long and invalid upgrade header can cause a remote WebSocket ...

CVE-2012-5624

CVE-2012-5624 affects Qt 4.x where the XMLHttpRequest implementation could be redirected from http to the file: URL scheme, enabling a man‑in‑the‑middle attacker to trigger reads of local files in a QML application. The root cause is improper handling of redirects in XMLHttpRequest, allowing acce...

CVE-2010-2621

CVE-2010-2621 affects Qt 4.6.3 and earlier; the QSslSocketBackendPrivate::transmit() function can be triggered by a malformed request to cause a denial of service via an infinite loop. Connected advisories confirm unpatched status in some distributions and note that security updates exist (e.g., ...