Stack-based buffer overflow in QXmlSimpleReader in Qt 4.8.5 allows remote attackers to cause a denial of service (application crash) via a xml file with multiple nested open tags.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qtbase-opensource-src | Jul 30, 2024 | Mar 7, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 24, 2016 |
| Suse | — | Upgrade libqt4Upgrade libqt4-sql-unixODBC-32bitUpgrade libqt4-x11-32bitUpgrade libqt4-x11Upgrade libqt4-sql-32bitUpgrade qt4-qtscriptUpgrade libqt4-32bitUpgrade libqt4-linguistUpgrade qt4-x11-toolsUpgrade libqt4-sql-mysql-32bitUpgrade libqt4-devel-doc-dataUpgrade libqt4-devel-docUpgrade libqt4-sql-sqliteUpgrade libqt4-sql-sqlite-32bitUpgrade libqt4-sql-postgresqlUpgrade libqt4-qt3supportUpgrade libqt4-sqlUpgrade libqt4-sql-mysqlUpgrade libqt4-qt3support-32bitUpgrade libQtWebKit-develUpgrade libQtWebKit4Upgrade libqt4-private-headers-develUpgrade libqca2-develUpgrade libqt4-sql-unixODBCUpgrade libqca2-32bitUpgrade libqt4-develUpgrade libqt4-sql-postgresql-32bitUpgrade libQtWebKit4-32bitUpgrade libqca2 | Jul 8, 2018 | Mar 7, 2017 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 7, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub