The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qtbase-opensource-src | Jul 30, 2024 | May 12, 2015 |
| Freebsd | — | Upgrade qt4-imageformatsUpgrade qt5-guiUpgrade qt4-gui | Dec 10, 2025 | Apr 14, 2015 |
| Gentoo Linux | — | Upgrade dev-qt/qtgui. | Oct 30, 2017 | May 12, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qt-x11Upgrade qt-postgresqlUpgrade qt-develUpgrade qtUpgrade qt-mysqlUpgrade qt-odbc | Dec 4, 2019 | May 12, 2015 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qt-mysqlUpgrade qt-odbcUpgrade qt-postgresqlUpgrade qtUpgrade qt-develUpgrade qt-x11 | Dec 18, 2019 | May 12, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 11, 2015 |
| Suse | — | Upgrade libqt5printsupport5Upgrade libqt5core-private-headers-develUpgrade libqt5widgets-private-headers-develUpgrade libqt5sql-develUpgrade libqt5sql5-mysqlUpgrade libqt5sql5-unixodbcUpgrade libqt5test5Upgrade libqt4-sql-unixODBCUpgrade libqt5-qtbase-docUpgrade libqt4-x86Upgrade libqt4-sql-postgresqlUpgrade libqt4-sql-postgresql-x86Upgrade libqt5test-develUpgrade libqt5core-develUpgrade libqt5printsupport-private-headers-develUpgrade libqt4-sql-mysqlUpgrade libqt4-sql-postgresql-32bitUpgrade libqt5network-develUpgrade libqt5opengl5Upgrade libqt5xml-develUpgrade libqt5widgets-develUpgrade libQtWebKit4-x86Upgrade libqt4-sql-unixODBC-x86Upgrade libqt4-qt3support-32bitUpgrade libqt5concurrent5Upgrade libqt5opengl-private-headers-develUpgrade libqt5network-private-headers-develUpgrade libqt5network5Upgrade libqt5gui5Upgrade libqt5-qtbase-common-develUpgrade libqt4-sql-x86Upgrade libqt5printsupport-develUpgrade libqt4-sql-mysql-32bitUpgrade libQtWebKit4Upgrade libqt5platformheaders-develUpgrade libqt4-linguistUpgrade libqt4-32bitUpgrade libqt5xml5Upgrade libqt4-sql-sqlite-x86Upgrade qt4-x11-toolsUpgrade libqt5core5Upgrade libqt4-devel-docUpgrade libqt5dbus5Upgrade libqt5concurrent-develUpgrade libqt4-sql-32bitUpgrade libqt4-sql-mysql-x86Upgrade libqt5sql-private-headers-develUpgrade libqt5gui-develUpgrade libqt4-x11Upgrade libqt4-devel-doc-dataUpgrade libqt5platformsupport-devel-staticUpgrade libqt4-sql-unixODBC-32bitUpgrade libqt4Upgrade libqt4-x11-x86Upgrade libqt4-sql-sqliteUpgrade libqt5bootstrap-devel-staticUpgrade libqt5platformsupport-private-headers-develUpgrade libqt5test-private-headers-develUpgrade libqt5-qtbase-develUpgrade libqt5sql5Upgrade libqt4-x11-32bitUpgrade libQtWebKit-develUpgrade libqt5sql5-postgresqlUpgrade libQtWebKit4-32bitUpgrade libqt4-qt3supportUpgrade libqt4-sqlUpgrade libqt5opengl-develUpgrade libqt5dbus-develUpgrade libqt5sql5-sqliteUpgrade libqt5openglextensions-devel-staticUpgrade libqt4-qt3support-x86Upgrade libqt4-develUpgrade libqt5gui-private-headers-develUpgrade libqt4-private-headers-develUpgrade libqt5widgets5Upgrade libqt5-qtbase-private-headers-develUpgrade libqt4-sql-sqlite-32bitUpgrade libqt5dbus-private-headers-devel | Dec 18, 2015 | May 12, 2015 |
| Ubuntu | — | Upgrade libqtgui4Upgrade libqt5gui5 | Nov 8, 2024 | May 12, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub