The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qtbase-opensource-src | Jul 30, 2024 | Mar 25, 2015 |
| Freebsd | — | Upgrade qt4-guiUpgrade qt5-gui | Dec 10, 2025 | Mar 5, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qt-develUpgrade qt-odbcUpgrade qt-postgresqlUpgrade qtUpgrade qt-x11Upgrade qt-mysql | Dec 4, 2019 | Mar 25, 2015 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qt-mysqlUpgrade qt-odbcUpgrade qtUpgrade qt-x11Upgrade qt-postgresqlUpgrade qt-devel | Dec 18, 2019 | Mar 25, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2015 |
| Suse | — | Upgrade libqt5printsupport-private-headers-develUpgrade libqt4-qt3support-32bitUpgrade libqt5gui-develUpgrade libqt4-devel-docUpgrade libqt4-qt3support-x86Upgrade libqt5concurrent-develUpgrade libqt5dbus-private-headers-develUpgrade libqt4-sql-sqlite-32bitUpgrade libqt5-qtbase-docUpgrade libqt4-sql-unixODBC-x86Upgrade libqt4-sql-32bitUpgrade libqt5sql-private-headers-develUpgrade libqt4-sql-postgresqlUpgrade libqt5opengl-private-headers-develUpgrade libqt5test-develUpgrade libqt4-qt3supportUpgrade libqt5test5Upgrade libqt5xml5Upgrade libqt5sql5-unixodbcUpgrade libqt4-sql-mysql-32bitUpgrade libqt5network-private-headers-develUpgrade qt4-x11-toolsUpgrade libqt4-x11Upgrade libqt4-x11-32bitUpgrade libqt5sql5-sqliteUpgrade libqt4-sql-sqlite-x86Upgrade libqt5xml-develUpgrade libQtWebKit4Upgrade libqt5platformsupport-devel-staticUpgrade libqt5network5Upgrade libqt5sql5-mysqlUpgrade libqt5test-private-headers-develUpgrade libqt5platformsupport-private-headers-develUpgrade libqt5widgets5Upgrade libqt4-sql-postgresql-x86Upgrade libqt5kmssupport-private-headers-develUpgrade libqt5dbus-develUpgrade libqt4-x11-x86Upgrade libqt5sql5Upgrade libqt5bootstrap-devel-staticUpgrade libqt4-linguistUpgrade libqt4-sql-sqliteUpgrade libqt4-sql-unixODBC-32bitUpgrade libqt5gui5Upgrade libqt4-devel-doc-dataUpgrade libqt4-x86Upgrade libqt5gui-private-headers-develUpgrade libqt5core-develUpgrade libqt4-sql-postgresql-32bitUpgrade libqt5opengl5Upgrade libqt5widgets-develUpgrade libqt5sql5-postgresqlUpgrade libqt5-qtbase-private-headers-develUpgrade libQtWebKit-develUpgrade libqt4-32bitUpgrade libqt5sql-develUpgrade libqt5concurrent5Upgrade libqt5-qtbase-develUpgrade libqt5-qtbase-common-develUpgrade libqt4Upgrade libqt5core5Upgrade libqt5core-private-headers-develUpgrade libqt5kmssupport-devel-staticUpgrade libqt4-sql-x86Upgrade libqt4-develUpgrade libqt5printsupport-develUpgrade libQtWebKit4-32bitUpgrade libqt4-sql-unixODBCUpgrade libqt5widgets-private-headers-develUpgrade libqt4-sqlUpgrade libqt5openglextensions-devel-staticUpgrade libqt5opengl-develUpgrade libqt5network-develUpgrade libqt5-qtbase-platformtheme-gtk3Upgrade libqt5printsupport5Upgrade libqt4-sql-mysqlUpgrade libqt5dbus5Upgrade libqt4-sql-mysql-x86Upgrade libqt4-private-headers-develUpgrade libQtWebKit4-x86Upgrade libqt5platformheaders-devel | Dec 18, 2015 | Mar 25, 2015 |
| Ubuntu | — | Upgrade libqt5gui5Upgrade libqtgui4 | Nov 8, 2024 | Mar 25, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub