The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and height values in a GIF image.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade qt5-guiUpgrade qt4-imageformats | Dec 10, 2025 | Jul 19, 2014 |
| Gentoo Linux | — | Upgrade dev-qt/qtgui. | Oct 30, 2017 | May 8, 2014 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qt-develUpgrade qt-odbcUpgrade qt-x11Upgrade qt-postgresqlUpgrade qt-mysqlUpgrade qt | Dec 4, 2019 | May 8, 2014 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qt-x11Upgrade qt-develUpgrade qtUpgrade qt-mysqlUpgrade qt-postgresqlUpgrade qt-odbc | Dec 18, 2019 | May 8, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 14, 2014 |
| Suse | — | Upgrade libqt4-devel-doc-dataUpgrade libqt4-sql-32bitUpgrade libqt4-x11-32bitUpgrade libqt4-x11Upgrade libqt4-32bitUpgrade libqt4Upgrade libqt4-sqlUpgrade libqt4-sql-mysql-32bitUpgrade libqt4-qt3supportUpgrade libqt4-sql-sqlite-32bitUpgrade libqt4-sql-sqliteUpgrade libqt4-private-headers-develUpgrade libqt4-sql-unixODBCUpgrade libqt4-sql-unixODBC-32bitUpgrade libqt4-qt3support-32bitUpgrade libqt4-sql-postgresqlUpgrade qt4-x11-toolsUpgrade libqt4-sql-mysqlUpgrade libqt4-sql-postgresql-32bitUpgrade libqt4-develUpgrade libqt4-devel-docUpgrade libqt4-linguist | Dec 18, 2015 | May 8, 2014 |
| Ubuntu | — | Upgrade libqt5gui5Upgrade libqtgui4 | Nov 8, 2024 | May 8, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub