Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qtbase-opensource-src | Jul 30, 2024 | May 12, 2015 |
| Freebsd | — | Upgrade qt4-guiUpgrade qt5-guiUpgrade qt4-imageformats | Dec 10, 2025 | Apr 14, 2015 |
| Gentoo Linux | — | Upgrade dev-qt/qtgui. | Oct 30, 2017 | May 12, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qtUpgrade qt-postgresqlUpgrade qt-mysqlUpgrade qt-odbcUpgrade qt-develUpgrade qt-x11 | Dec 4, 2019 | May 12, 2015 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qt-postgresqlUpgrade qt-develUpgrade qt-x11Upgrade qt-odbcUpgrade qt-mysqlUpgrade qt | Dec 18, 2019 | May 12, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 11, 2015 |
| Suse | — | Upgrade libqt5printsupport5Upgrade libqt4-develUpgrade libqt5test5Upgrade libqt5widgets5Upgrade libQtWebKit4-x86Upgrade libqt5dbus5Upgrade libqt5network5Upgrade libqt5core-develUpgrade libqt5-qtbase-develUpgrade libqt5sql-develUpgrade libqt4-sql-mysql-x86Upgrade libqt5-qtbase-common-develUpgrade libqt5-qtbase-private-headers-develUpgrade libqt5gui-private-headers-develUpgrade libqt5core5Upgrade libqt4-private-headers-develUpgrade libqt4-sql-postgresql-32bitUpgrade libqt5core-private-headers-develUpgrade libqt4-sql-unixODBCUpgrade libqt5concurrent5Upgrade libqt5sql5-postgresqlUpgrade libqt5network-private-headers-develUpgrade libqt5network-develUpgrade libQtWebKit-develUpgrade libqt4-sqlUpgrade libqt4Upgrade libqt5xml5Upgrade libQtWebKit4-32bitUpgrade libqt4-sql-x86Upgrade libqt5test-develUpgrade libqt5platformheaders-develUpgrade libqt5widgets-develUpgrade libqt5openglextensions-devel-staticUpgrade libqt5widgets-private-headers-develUpgrade libQtWebKit4Upgrade libqt5printsupport-develUpgrade libqt5gui5Upgrade libqt4-qt3supportUpgrade libqt5dbus-develUpgrade libqt5-qtbase-docUpgrade libqt4-sql-postgresqlUpgrade libqt4-devel-doc-dataUpgrade libqt5opengl5Upgrade qt4-x11-toolsUpgrade libqt4-x11-32bitUpgrade libqt5sql-private-headers-develUpgrade libqt4-sql-mysqlUpgrade libqt4-sql-32bitUpgrade libqt5opengl-develUpgrade libqt5printsupport-private-headers-develUpgrade libqt4-sql-sqlite-32bitUpgrade libqt4-sql-sqlite-x86Upgrade libqt4-devel-docUpgrade libqt5sql5-mysqlUpgrade libqt4-qt3support-32bitUpgrade libqt4-qt3support-x86Upgrade libqt5concurrent-develUpgrade libqt4-sql-postgresql-x86Upgrade libqt5sql5-sqliteUpgrade libqt4-sql-unixODBC-x86Upgrade libqt4-x86Upgrade libqt4-sql-mysql-32bitUpgrade libqt5xml-develUpgrade libqt4-32bitUpgrade libqt5opengl-private-headers-develUpgrade libqt5sql5-unixodbcUpgrade libqt4-sql-unixODBC-32bitUpgrade libqt5platformsupport-private-headers-develUpgrade libqt4-sql-sqliteUpgrade libqt5test-private-headers-develUpgrade libqt5bootstrap-devel-staticUpgrade libqt4-linguistUpgrade libqt5sql5Upgrade libqt4-x11Upgrade libqt5platformsupport-devel-staticUpgrade libqt5gui-develUpgrade libqt4-x11-x86Upgrade libqt5dbus-private-headers-devel | Dec 18, 2015 | May 12, 2015 |
| Ubuntu | — | Upgrade libqt5gui5Upgrade libqtgui4 | Nov 8, 2024 | May 12, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub