An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1. read_xbm_body in gui/image/qxbmhandler.cpp has a buffer over-read.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade qt5-qtbase-static | May 4, 2022 | Aug 12, 2020 |
| Alpine Linux | — | Upgrade qt5-qtbase | Aug 22, 2024 | Aug 12, 2020 |
| Amazon Linux Ami 2 | — | Upgrade qt5-qtbase-odbcUpgrade qt-assistantUpgrade qt-mysqlUpgrade qt-qvfbUpgrade qt-odbcUpgrade qt-demosUpgrade qt5-qtbase-commonUpgrade qt-configUpgrade qt-postgresqlUpgrade qt5-qtbaseUpgrade qt-qdbusviewerUpgrade qt-x11Upgrade qt5-qtbase-debuginfoUpgrade qt-debuginfoUpgrade qtUpgrade qt5-qtbase-examplesUpgrade qt-docUpgrade qt-devel-privateUpgrade qt-develUpgrade qt-examplesUpgrade qt5-qtbase-postgresqlUpgrade qt5-qtbase-mysqlUpgrade qt5-qtbase-docUpgrade qt5-qtbase-develUpgrade qt5-qtbase-staticUpgrade qt5-rpm-macrosUpgrade qt5-qtbase-gui | Dec 10, 2020 | Aug 12, 2020 |
| Centos_linux | — | Upgrade qtUpgrade qt-x11Upgrade qt5-qtbase-private-develUpgrade qt5-qtbase-examplesUpgrade qt5-qtbase-staticUpgrade qt-develUpgrade qt5-qtbase-docUpgrade qt5-qtbase-develUpgrade qt5-qtbase-odbc-debuginfoUpgrade qt-mysqlUpgrade qt5-qtbase-guiUpgrade qt-devel-privateUpgrade qt5-qtbase-postgresqlUpgrade qt5-qtbase-tests-debuginfoUpgrade qt5-qtbase-mysqlUpgrade qt-debuginfoUpgrade qt-examplesUpgrade qt5-qtbase-gui-debuginfoUpgrade qt5-rpm-macrosUpgrade qt-docUpgrade qt5-qtbase-odbcUpgrade qt5-qtbase-debuginfoUpgrade qt-odbcUpgrade qt-qdbusviewerUpgrade qt5-qtbase-mysql-debuginfoUpgrade qt5-qtbase-postgresql-debuginfoUpgrade qt-postgresqlUpgrade qt5-qtbaseUpgrade qt-assistantUpgrade qt5-qtbase-debugsourceUpgrade qt5-qtbase-commonUpgrade qt-configUpgrade qt5-qtbase-devel-debuginfoUpgrade qt-demosUpgrade qt5-qtbase-examples-debuginfoUpgrade qt-qvfb | Nov 11, 2020 | Aug 12, 2020 |
| Debian | — | Upgrade qtbase-opensource-src | Sep 28, 2020 | Aug 12, 2020 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 16, 2021 |
| Gentoo Linux | — | Upgrade dev-qt/qtgui. | Sep 14, 2020 | Aug 12, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qt-develUpgrade qt-odbcUpgrade qt-x11Upgrade qtUpgrade qt-postgresqlUpgrade qt-mysql | Nov 3, 2020 | Aug 12, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qt-odbcUpgrade qt-x11Upgrade qtUpgrade qt-mysqlUpgrade qt-postgresqlUpgrade qt-devel | Sep 28, 2020 | Aug 12, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade qt-mysqlUpgrade qt-x11Upgrade qt-odbcUpgrade qtUpgrade qt-postgresqlUpgrade qt-devel | Nov 2, 2020 | Aug 12, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qt-x11Upgrade qt-develUpgrade qt-commonUpgrade qtUpgrade qt-odbcUpgrade qt-mysql | Sep 29, 2020 | Aug 12, 2020 |
| Oracle Solaris | — | Upgrade library/desktop/qt5 to version 5.12.9-11.4.25.0.1.75.3 on Solaris 11.4 | Jan 19, 2021 | Aug 12, 2020 |
| Oracle_linux | — | Upgrade qt5-qtbase-guiUpgrade qt-configUpgrade qt-assistantUpgrade qt5-qtbase-odbcUpgrade qt5-qtbase-examplesUpgrade qt5-qtbase-mysqlUpgrade qt-postgresqlUpgrade qt-demosUpgrade qt-devel-privateUpgrade qt5-rpm-macrosUpgrade qt5-qtbase-postgresqlUpgrade qt-examplesUpgrade qt-mysqlUpgrade qtUpgrade qt-qvfbUpgrade qt5-qtbaseUpgrade qt-odbcUpgrade qt5-qtbase-staticUpgrade qt5-qtbase-private-develUpgrade qt-develUpgrade qt5-qtbase-docUpgrade qt5-qtbase-commonUpgrade qt-docUpgrade qt-qdbusviewerUpgrade qt5-qtbase-develUpgrade qt-x11 | Nov 12, 2020 | Aug 12, 2020 |
| Redhat_linux | — | Upgrade qt5-qtbase-develNo solution existsUpgrade qt-demosUpgrade qt5-qtbase-commonUpgrade qt5-qtbase-odbcUpgrade qt5-qtbase-tests-debuginfoUpgrade qt-x11Upgrade qt5-qtbase-examplesUpgrade qt5-qtbase-mysqlUpgrade qt5-rpm-macrosUpgrade qt5-qtbase-guiUpgrade qt-docUpgrade qtUpgrade qt5-qtbase-examples-debuginfoUpgrade qt5-qtbase-docUpgrade qt-postgresqlUpgrade qt5-qtbase-postgresql-debuginfoUpgrade qt5-qtbase-postgresqlUpgrade qt-qvfbUpgrade qt-develUpgrade qt-qdbusviewerUpgrade qt5-qtbaseUpgrade qt-devel-privateUpgrade qt5-qtbase-mysql-debuginfoUpgrade qt5-qtbase-odbc-debuginfoUpgrade qt5-qtbase-debugsourceUpgrade qt5-qtbase-private-develUpgrade qt-examplesUpgrade qt-odbcUpgrade qt5-qtbase-devel-debuginfoUpgrade qt-configUpgrade qt5-qtbase-debuginfoUpgrade qt-assistantUpgrade qt-debuginfoUpgrade qt5-qtbase-staticUpgrade qt5-qtbase-gui-debuginfoUpgrade qt-mysql | Nov 11, 2020 | Aug 12, 2020 |
| Suse | — | Upgrade libqt4-sql-unixODBCUpgrade libqt5sql5-unixodbcUpgrade libqt5test-devel-32bitUpgrade libqt4-private-headers-develUpgrade libqt4-32bitUpgrade libqt5printsupport-private-headers-develUpgrade qt4-x11-toolsUpgrade libqt5sql5-postgresqlUpgrade libqt5platformheaders-develUpgrade libqt5bootstrap-devel-staticUpgrade libqt4-sql-mysqlUpgrade libqt5dbus-devel-32bitUpgrade libqt4-sql-postgresql-64bitUpgrade libqt5test-private-headers-develUpgrade libqt5concurrent-devel-32bitUpgrade libqt4-sql-unixODBC-64bitUpgrade libqt5network5Upgrade libqt4-x11Upgrade libqt5kmssupport-devel-staticUpgrade libqt5gui-develUpgrade libqt5network5-32bitUpgrade libqt5core5Upgrade libqt5opengl5Upgrade libqt5printsupport-develUpgrade libqt5printsupport5Upgrade libqt4-qt3support-64bitUpgrade libqt4-sql-sqlite-64bitUpgrade libqt5sql5-postgresql-32bitUpgrade libqt5concurrent5-32bitUpgrade libqt5core-private-headers-develUpgrade libqt5opengl-private-headers-develUpgrade libqt5sql5-sqlite-32bitUpgrade libqt4-64bitUpgrade libqt4Upgrade libqt5core5-32bitUpgrade libqt4-devel-32bitUpgrade libqt5concurrent-develUpgrade libqt5opengl-develUpgrade libqt5gui-devel-32bitUpgrade libqt5-qtbase-platformtheme-gtk3Upgrade libqt5printsupport-devel-32bitUpgrade libqt5sql5Upgrade libqt5gui5Upgrade libqt4-sqlUpgrade libqt5concurrent5Upgrade libqt5core-devel-32bitUpgrade libqt5network-develUpgrade libqt5kmssupport-private-headers-develUpgrade libqt4-x11-32bitUpgrade libqt4-sql-64bitUpgrade libqt5dbus-develUpgrade libqt5sql5-unixodbc-32bitUpgrade libqt5openglextensions-devel-staticUpgrade libqt5sql-develUpgrade libqt5sql5-sqliteUpgrade libqt5bootstrap-devel-static-32bitUpgrade libqt4-sql-sqlite-32bitUpgrade libqt4-sql-sqliteUpgrade libqt4-sql-postgresql-32bitUpgrade libqt5sql5-mysql-32bitUpgrade libqt5-qtbase-private-headers-develUpgrade libqt5platformsupport-devel-staticUpgrade libqt5widgets-devel-32bitUpgrade libqt5test-develUpgrade libqt5platformsupport-private-headers-develUpgrade libqt5sql5-32bitUpgrade libqt5opengl-devel-32bitUpgrade libqt5openglextensions-devel-static-32bitUpgrade libqt4-devel-docUpgrade libqt5xml5-32bitUpgrade libqt4-qt3support-32bitUpgrade libqt5platformsupport-devel-static-32bitUpgrade libqt5widgets5Upgrade libqt5-qtbase-platformtheme-xdgdesktopportalUpgrade libqt4-qt3supportUpgrade libqt4-sql-unixODBC-32bitUpgrade libqt5network-private-headers-develUpgrade libqt5-qtbase-examplesUpgrade libqt5gui5-32bitUpgrade libqt4-sql-mysql-32bitUpgrade libqt5-qtbase-examples-32bitUpgrade libqt5widgets5-32bitUpgrade libqt5dbus5Upgrade libqt4-sql-postgresqlUpgrade libqt5network-devel-32bitUpgrade libqt4-sql-32bitUpgrade libqt5sql-private-headers-develUpgrade libqt5xml-devel-32bitUpgrade libqt4-linguistUpgrade libqt5test5-32bitUpgrade libqt5sql5-mysqlUpgrade libqt5widgets-develUpgrade libqt5gui-private-headers-develUpgrade libqt4-x11-64bitUpgrade libqt4-devel-doc-dataUpgrade libqt5xml-develUpgrade libqt5-qtbase-develUpgrade libqt5widgets-private-headers-develUpgrade libqt5-qtbase-common-develUpgrade libqt5dbus5-32bitUpgrade libqt5opengl5-32bitUpgrade libqt5xml5Upgrade libqt5sql-devel-32bitUpgrade libqt5printsupport5-32bitUpgrade libqt5dbus-private-headers-develUpgrade libqt4-develUpgrade libqt4-devel-64bitUpgrade libqt5core-develUpgrade libqt5test5 | Sep 19, 2020 | Aug 12, 2020 |
| Ubuntu | — | Upgrade libqt5core5aUpgrade libqt5gui5Upgrade libqt5gui5 (Ubuntu Pro)Upgrade libqt5core5a (Ubuntu Pro) | Sep 17, 2021 | Aug 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub