Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qtbase-opensource-src | Jul 30, 2024 | May 12, 2015 |
| Freebsd | — | Upgrade qt4-imageformatsUpgrade qt5-guiUpgrade qt4-gui | Dec 10, 2025 | Apr 14, 2015 |
| Gentoo Linux | — | Upgrade dev-qt/qtgui. | Oct 30, 2017 | May 12, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qt-develUpgrade qt-odbcUpgrade qtUpgrade qt-mysqlUpgrade qt-postgresqlUpgrade qt-x11 | Dec 4, 2019 | May 12, 2015 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qt-mysqlUpgrade qt-postgresqlUpgrade qt-odbcUpgrade qt-x11Upgrade qtUpgrade qt-devel | Dec 18, 2019 | May 12, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 11, 2015 |
| Suse | — | Upgrade libqt4-x11-x86Upgrade libqt4-qt3support-x86Upgrade libqt5-qtbase-private-headers-develUpgrade libqt4-devel-doc-dataUpgrade libqt4-x11Upgrade libqt5bootstrap-devel-staticUpgrade libQtWebKit4-32bitUpgrade libqt5sql5Upgrade libqt4-qt3supportUpgrade libqt5widgets5Upgrade libqt4-develUpgrade libqt5dbus5Upgrade libqt4-sqlUpgrade libqt4-sql-32bitUpgrade libqt4-sql-mysql-x86Upgrade libqt5sql-private-headers-develUpgrade libQtWebKit-develUpgrade libqt5gui-develUpgrade libqt5dbus-private-headers-develUpgrade libqt5concurrent-develUpgrade libqt4-sql-sqliteUpgrade libqt5openglextensions-devel-staticUpgrade libqt5gui-private-headers-develUpgrade libqt5sql5-sqliteUpgrade libqt5dbus-develUpgrade libqt5opengl-develUpgrade libqt4Upgrade libqt4-sql-sqlite-32bitUpgrade libqt5platformsupport-private-headers-develUpgrade libqt4-private-headers-develUpgrade libqt4-sql-unixODBC-32bitUpgrade libqt5sql5-postgresqlUpgrade libqt4-x11-32bitUpgrade libqt5platformsupport-devel-staticUpgrade libqt5-qtbase-develUpgrade libqt5test-private-headers-develUpgrade libqt5concurrent5Upgrade libqt4-x86Upgrade libqt4-qt3support-32bitUpgrade libqt4-sql-mysqlUpgrade libQtWebKit4-x86Upgrade libqt5gui5Upgrade libqt4-sql-unixODBC-x86Upgrade libqt5network5Upgrade libqt5printsupport-private-headers-develUpgrade libqt5test-develUpgrade libqt5platformheaders-develUpgrade libqt5widgets-private-headers-develUpgrade libqt4-linguistUpgrade libqt4-sql-mysql-32bitUpgrade libqt5xml-develUpgrade libqt5printsupport5Upgrade libQtWebKit4Upgrade libqt5printsupport-develUpgrade libqt5widgets-develUpgrade libqt5sql5-mysqlUpgrade libqt5core-develUpgrade libqt5xml5Upgrade libqt4-sql-sqlite-x86Upgrade libqt5sql5-unixodbcUpgrade qt4-x11-toolsUpgrade libqt5-qtbase-common-develUpgrade libqt5core5Upgrade libqt4-sql-unixODBCUpgrade libqt4-sql-postgresqlUpgrade libqt5test5Upgrade libqt5-qtbase-docUpgrade libqt4-sql-postgresql-x86Upgrade libqt5network-private-headers-develUpgrade libqt4-devel-docUpgrade libqt5network-develUpgrade libqt5opengl5Upgrade libqt4-sql-x86Upgrade libqt5core-private-headers-develUpgrade libqt5opengl-private-headers-develUpgrade libqt5sql-develUpgrade libqt4-32bitUpgrade libqt4-sql-postgresql-32bit | Dec 18, 2015 | May 12, 2015 |
| Ubuntu | — | Upgrade libqt5gui5Upgrade libqtgui4 | Nov 8, 2024 | May 12, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub