Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qtbase-opensource-src | Jul 30, 2024 | May 12, 2015 |
| Freebsd | — | Upgrade qt4-guiUpgrade qt4-imageformatsUpgrade qt5-gui | Dec 10, 2025 | Apr 14, 2015 |
| Gentoo Linux | — | Upgrade dev-qt/qtgui. | Oct 30, 2017 | May 12, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qt-x11Upgrade qt-develUpgrade qt-mysqlUpgrade qt-postgresqlUpgrade qt-odbcUpgrade qt | Dec 4, 2019 | May 12, 2015 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qt-postgresqlUpgrade qt-odbcUpgrade qt-x11Upgrade qtUpgrade qt-develUpgrade qt-mysql | Dec 18, 2019 | May 12, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 11, 2015 |
| Suse | — | Upgrade libqt5platformsupport-devel-staticUpgrade libqt4-x11-32bitUpgrade libqt5opengl-private-headers-develUpgrade libqt5widgets-private-headers-develUpgrade libqt5sql-develUpgrade libqt5opengl5Upgrade libqt5network-develUpgrade libqt5sql5-mysqlUpgrade libqt5gui-private-headers-develUpgrade libqt4-x86Upgrade libqt5dbus-private-headers-develUpgrade libqt4-sql-sqlite-x86Upgrade libqt5openglextensions-devel-staticUpgrade libqt4-linguistUpgrade libqt5printsupport-develUpgrade libqt5dbus-develUpgrade libqt5printsupport5Upgrade libqt4-develUpgrade libqt5sql-private-headers-develUpgrade libqt4-sql-mysqlUpgrade libqt5test5Upgrade libqt5sql5-unixodbcUpgrade libqt4-sqlUpgrade libqt4-private-headers-develUpgrade libqt5platformheaders-develUpgrade libQtWebKit4-32bitUpgrade libqt5core-private-headers-develUpgrade libqt5opengl-develUpgrade libQtWebKit4-x86Upgrade libqt4-sql-unixODBCUpgrade libqt5concurrent5Upgrade libqt4-qt3support-32bitUpgrade libqt4-sql-x86Upgrade libqt4-sql-unixODBC-32bitUpgrade libqt4-sql-mysql-x86Upgrade libqt5dbus5Upgrade libqt5xml5Upgrade libqt5core5Upgrade libqt4-devel-doc-dataUpgrade libqt4-sql-postgresql-32bitUpgrade libqt5core-develUpgrade libqt5network5Upgrade libqt5sql5-sqliteUpgrade libqt4-32bitUpgrade libqt4-qt3support-x86Upgrade libqt5sql5-postgresqlUpgrade libqt5gui-develUpgrade libqt4Upgrade libqt4-devel-docUpgrade libqt5-qtbase-develUpgrade libqt4-sql-unixODBC-x86Upgrade libQtWebKit-develUpgrade libqt5concurrent-develUpgrade libqt4-sql-mysql-32bitUpgrade libqt4-sql-32bitUpgrade libqt4-sql-sqlite-32bitUpgrade libqt5widgets5Upgrade libqt4-qt3supportUpgrade libqt5test-develUpgrade libqt5bootstrap-devel-staticUpgrade libqt5widgets-develUpgrade libqt5platformsupport-private-headers-develUpgrade libqt5test-private-headers-develUpgrade libqt5-qtbase-docUpgrade libqt5sql5Upgrade libqt5network-private-headers-develUpgrade libqt4-sql-postgresqlUpgrade libqt4-sql-sqliteUpgrade qt4-x11-toolsUpgrade libQtWebKit4Upgrade libqt5-qtbase-private-headers-develUpgrade libqt5gui5Upgrade libqt5printsupport-private-headers-develUpgrade libqt4-sql-postgresql-x86Upgrade libqt5xml-develUpgrade libqt4-x11Upgrade libqt5-qtbase-common-develUpgrade libqt4-x11-x86 | Dec 18, 2015 | May 12, 2015 |
| Ubuntu | — | Upgrade libqt5gui5Upgrade libqtgui4 | Nov 8, 2024 | May 12, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub