The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qtbase-opensource-src | Jul 30, 2024 | Mar 25, 2015 |
| Freebsd | — | Upgrade qt4-guiUpgrade qt5-gui | Dec 10, 2025 | Mar 5, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qt-develUpgrade qt-odbcUpgrade qt-mysqlUpgrade qt-x11Upgrade qtUpgrade qt-postgresql | Dec 4, 2019 | Mar 25, 2015 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qtUpgrade qt-odbcUpgrade qt-mysqlUpgrade qt-postgresqlUpgrade qt-x11Upgrade qt-devel | Dec 18, 2019 | Mar 25, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2015 |
| Suse | — | Upgrade libqt4-sql-sqlite-32bitUpgrade libqt5opengl-private-headers-develUpgrade libqt4-sql-postgresqlUpgrade libqt4-linguistUpgrade libqt5bootstrap-devel-staticUpgrade libqt4-qt3supportUpgrade libqt5platformsupport-private-headers-develUpgrade libqt5test-develUpgrade libqt4-sql-unixODBC-32bitUpgrade libqt4-devel-doc-dataUpgrade libqt4-qt3support-32bitUpgrade libqt4-sql-postgresql-x86Upgrade libQtWebKit4Upgrade libqt5xml5Upgrade libqt4-sql-sqlite-x86Upgrade libqt5sql5Upgrade libqt4-sql-sqliteUpgrade libqt5dbus-develUpgrade libqt5test5Upgrade libqt4-sql-mysql-32bitUpgrade libqt5-qtbase-docUpgrade libqt5printsupport-private-headers-develUpgrade libqt4-sql-32bitUpgrade libqt5network-private-headers-develUpgrade libqt5sql-private-headers-develUpgrade libqt5sql5-mysqlUpgrade libqt5platformsupport-devel-staticUpgrade libqt5gui5Upgrade libqt4-sql-unixODBC-x86Upgrade libqt4-x11-32bitUpgrade libqt5kmssupport-private-headers-develUpgrade libqt5test-private-headers-develUpgrade libqt4-devel-docUpgrade libqt4-x11-x86Upgrade libqt5concurrent-develUpgrade libqt5dbus-private-headers-develUpgrade qt4-x11-toolsUpgrade libqt5xml-develUpgrade libqt5sql5-unixodbcUpgrade libqt5gui-develUpgrade libqt5network5Upgrade libqt5sql5-sqliteUpgrade libqt4-x11Upgrade libqt5widgets5Upgrade libqt4-qt3support-x86Upgrade libqt5network-develUpgrade libqt4-sqlUpgrade libqt5-qtbase-platformtheme-gtk3Upgrade libqt5dbus5Upgrade libqt4-private-headers-develUpgrade libqt5concurrent5Upgrade libqt5-qtbase-develUpgrade libqt4-32bitUpgrade libqt5-qtbase-private-headers-develUpgrade libqt5platformheaders-develUpgrade libQtWebKit4-x86Upgrade libqt5opengl5Upgrade libqt4-sql-mysql-x86Upgrade libqt5sql-develUpgrade libQtWebKit4-32bitUpgrade libqt5openglextensions-devel-staticUpgrade libqt4-sql-x86Upgrade libqt5printsupport-develUpgrade libqt5opengl-develUpgrade libqt5gui-private-headers-develUpgrade libqt4-sql-unixODBCUpgrade libQtWebKit-develUpgrade libqt5printsupport5Upgrade libqt5kmssupport-devel-staticUpgrade libqt4-develUpgrade libqt5widgets-private-headers-develUpgrade libqt4Upgrade libqt4-sql-postgresql-32bitUpgrade libqt4-x86Upgrade libqt5-qtbase-common-develUpgrade libqt5core5Upgrade libqt5core-private-headers-develUpgrade libqt5core-develUpgrade libqt5sql5-postgresqlUpgrade libqt5widgets-develUpgrade libqt4-sql-mysql | Dec 18, 2015 | Mar 25, 2015 |
| Ubuntu | — | Upgrade libqt5gui5Upgrade libqtgui4 | Nov 8, 2024 | Mar 25, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub