Name: CVE-2020-17507: Out-of-bounds Read
Creator: Rapid7
Published: 2020-08-12T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2020-17507, CWE-125, CVSS 5.3, EPSS 0.0399

An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1. read_xbm_body in gui/image/qxbmhandler.cpp has a buffer over-read.

CVSS Details

CVSS 3.1 Base Score: 5.3
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade qt5-qtbase-static	May 4, 2022	Aug 12, 2020
Alpine Linux	—	Upgrade qt5-qtbase	Aug 22, 2024	Aug 12, 2020
Amazon Linux Ami 2	—	Upgrade qt-demosUpgrade qt-qdbusviewerUpgrade qt5-qtbase-commonUpgrade qt5-qtbaseUpgrade qt-odbcUpgrade qt-mysqlUpgrade qt-configUpgrade qt-assistantUpgrade qt5-qtbase-odbcUpgrade qt-qvfbUpgrade qt-postgresqlUpgrade qt5-qtbase-mysqlUpgrade qt-examplesUpgrade qt5-qtbase-staticUpgrade qt5-qtbase-docUpgrade qt-debuginfoUpgrade qt5-qtbase-debuginfoUpgrade qt-docUpgrade qt-devel-privateUpgrade qt5-qtbase-postgresqlUpgrade qt5-qtbase-develUpgrade qt5-qtbase-guiUpgrade qt5-qtbase-examplesUpgrade qtUpgrade qt-develUpgrade qt-x11Upgrade qt5-rpm-macros	Dec 10, 2020	Aug 12, 2020
Centos_linux	—	Upgrade qt-assistantUpgrade qt-qvfbUpgrade qt5-qtbase-mysql-debuginfoUpgrade qt-odbcUpgrade qt5-qtbase-examples-debuginfoUpgrade qt5-qtbaseUpgrade qt-qdbusviewerUpgrade qt5-qtbase-postgresql-debuginfoUpgrade qt-postgresqlUpgrade qt5-qtbase-devel-debuginfoUpgrade qt-configUpgrade qt5-qtbase-commonUpgrade qt-demosUpgrade qt5-qtbase-debugsourceUpgrade qt5-qtbase-odbcUpgrade qt-docUpgrade qt5-qtbase-guiUpgrade qt-debuginfoUpgrade qt5-qtbase-staticUpgrade qt5-qtbase-examplesUpgrade qt-examplesUpgrade qt5-qtbase-odbc-debuginfoUpgrade qt5-qtbase-mysqlUpgrade qt5-qtbase-develUpgrade qt-devel-privateUpgrade qt-develUpgrade qt5-qtbase-tests-debuginfoUpgrade qt5-qtbase-postgresqlUpgrade qt-mysqlUpgrade qtUpgrade qt5-qtbase-private-develUpgrade qt-x11Upgrade qt5-qtbase-gui-debuginfoUpgrade qt5-qtbase-docUpgrade qt5-rpm-macrosUpgrade qt5-qtbase-debuginfo	Nov 11, 2020	Aug 12, 2020
Debian	—	Upgrade qtbase-opensource-src	Sep 28, 2020	Aug 12, 2020
F5 Big Ip	—	Update F5 BIG-IP to the latest version	Jun 17, 2026	Apr 16, 2021
Gentoo Linux	—	Upgrade dev-qt/qtgui.	Sep 14, 2020	Aug 12, 2020
Huawei Euleros 2_0_sp2	—	Upgrade qt-develUpgrade qt-odbcUpgrade qt-x11Upgrade qtUpgrade qt-postgresqlUpgrade qt-mysql	Nov 3, 2020	Aug 12, 2020
Huawei Euleros 2_0_sp3	—	Upgrade qt-postgresqlUpgrade qt-mysqlUpgrade qt-develUpgrade qt-x11Upgrade qt-odbcUpgrade qt	Sep 28, 2020	Aug 12, 2020
Huawei Euleros 2_0_sp5	—	Upgrade qt-postgresqlUpgrade qt-develUpgrade qtUpgrade qt-mysqlUpgrade qt-odbcUpgrade qt-x11	Nov 2, 2020	Aug 12, 2020
Huawei Euleros 2_0_sp8	—	Upgrade qt-develUpgrade qt-x11Upgrade qt-commonUpgrade qt-odbcUpgrade qt-mysqlUpgrade qt	Sep 29, 2020	Aug 12, 2020
Oracle Solaris	—	Upgrade library/desktop/qt5 to version 5.12.9-11.4.25.0.1.75.3 on Solaris 11.4	Jan 19, 2021	Aug 12, 2020
Oracle_linux	—	Upgrade qt-demosUpgrade qt5-rpm-macrosUpgrade qt5-qtbase-postgresqlUpgrade qt-assistantUpgrade qt-configUpgrade qt-mysqlUpgrade qt-qvfbUpgrade qt5-qtbase-examplesUpgrade qt-examplesUpgrade qt5-qtbase-guiUpgrade qt5-qtbaseUpgrade qtUpgrade qt-devel-privateUpgrade qt5-qtbase-mysqlUpgrade qt-postgresqlUpgrade qt5-qtbase-odbcUpgrade qt5-qtbase-docUpgrade qt5-qtbase-commonUpgrade qt5-qtbase-staticUpgrade qt-develUpgrade qt5-qtbase-develUpgrade qt-docUpgrade qt-qdbusviewerUpgrade qt5-qtbase-private-develUpgrade qt-x11Upgrade qt-odbc	Nov 12, 2020	Aug 12, 2020
Redhat_linux	—	Upgrade qt5-qtbase-examplesUpgrade qt5-qtbase-develNo solution existsUpgrade qt-demosUpgrade qt5-qtbase-mysqlUpgrade qt5-qtbase-tests-debuginfoUpgrade qt5-qtbase-odbcUpgrade qt5-qtbase-guiUpgrade qt5-qtbase-commonUpgrade qt5-qtbase-examples-debuginfoUpgrade qt5-rpm-macrosUpgrade qt5-qtbase-docUpgrade qt-postgresqlUpgrade qt5-qtbase-postgresqlUpgrade qt-qvfbUpgrade qt5-qtbase-postgresql-debuginfoUpgrade qt-x11Upgrade qt-docUpgrade qtUpgrade qt5-qtbase-gui-debuginfoUpgrade qt-develUpgrade qt5-qtbase-debuginfoUpgrade qt5-qtbase-private-develUpgrade qt5-qtbase-mysql-debuginfoUpgrade qt5-qtbase-debugsourceUpgrade qt5-qtbase-odbc-debuginfoUpgrade qt-devel-privateUpgrade qt5-qtbaseUpgrade qt-debuginfoUpgrade qt-examplesUpgrade qt-assistantUpgrade qt-mysqlUpgrade qt-odbcUpgrade qt-configUpgrade qt5-qtbase-devel-debuginfoUpgrade qt-qdbusviewerUpgrade qt5-qtbase-static	Nov 11, 2020	Aug 12, 2020
Suse	—	Upgrade libqt4-linguistUpgrade libqt5core-develUpgrade libqt4-sql-postgresql-32bitUpgrade libqt4-sql-sqliteUpgrade libqt4-sql-sqlite-32bitUpgrade libqt5sql5-unixodbc-32bitUpgrade libqt5sql5-mysql-32bitUpgrade libqt5sql5-sqliteUpgrade libqt5dbus-private-headers-develUpgrade libqt5sql5-mysqlUpgrade libqt5xml-devel-32bitUpgrade libqt5opengl5-32bitUpgrade libqt5dbus-develUpgrade libqt5test5-32bitUpgrade libqt5sql-develUpgrade libqt5printsupport5-32bitUpgrade libqt5dbus5Upgrade libqt4-x11-64bitUpgrade libqt5-qtbase-examples-32bitUpgrade libqt5gui-private-headers-develUpgrade libqt5widgets5Upgrade libqt5openglextensions-devel-staticUpgrade libqt5widgets-develUpgrade libqt5-qtbase-platformtheme-xdgdesktopportalUpgrade libqt5network-devel-32bitUpgrade libqt5xml5Upgrade libqt4-develUpgrade libqt4-devel-64bitUpgrade libqt5widgets5-32bitUpgrade libqt5test5Upgrade libqt4-sql-postgresqlUpgrade libqt5platformsupport-devel-static-32bitUpgrade libqt5widgets-devel-32bitUpgrade libqt4-sql-unixODBC-32bitUpgrade libqt5-qtbase-common-develUpgrade libqt4-qt3supportUpgrade libqt5network-private-headers-develUpgrade libqt5-qtbase-develUpgrade libqt5xml5-32bitUpgrade libqt5xml-develUpgrade libqt5-qtbase-examplesUpgrade libqt5sql-private-headers-develUpgrade libqt5openglextensions-devel-static-32bitUpgrade libqt5gui5-32bitUpgrade libqt4-sql-mysql-32bitUpgrade libqt4-devel-docUpgrade libqt5opengl-devel-32bitUpgrade libqt4-devel-doc-dataUpgrade libqt5widgets-private-headers-develUpgrade libqt5-qtbase-private-headers-develUpgrade libqt4-qt3support-32bitUpgrade libqt5sql5-32bitUpgrade libqt5sql-devel-32bitUpgrade libqt5dbus5-32bitUpgrade libqt4-sql-64bitUpgrade libqt5platformsupport-private-headers-develUpgrade libqt5bootstrap-devel-static-32bitUpgrade libqt4-sql-32bitUpgrade libqt5test-develUpgrade libqt5platformsupport-devel-staticUpgrade libqt5sql5-postgresql-32bitUpgrade libqt5core5Upgrade libqt4Upgrade libqt4-x11Upgrade libqt4-32bitUpgrade libqt5sql5-postgresqlUpgrade libqt5test-devel-32bitUpgrade libqt5gui-devel-32bitUpgrade libqt4-64bitUpgrade libqt4-private-headers-develUpgrade libqt4-sql-unixODBCUpgrade libqt5core-devel-32bitUpgrade libqt5sql5-sqlite-32bitUpgrade libqt5sql5-unixodbcUpgrade libqt5opengl-develUpgrade libqt4-sql-sqlite-64bitUpgrade qt4-x11-toolsUpgrade libqt5opengl-private-headers-develUpgrade libqt5printsupport-private-headers-develUpgrade libqt4-sqlUpgrade libqt5sql5Upgrade libqt5concurrent-develUpgrade libqt5printsupport-devel-32bitUpgrade libqt5platformheaders-develUpgrade libqt5core-private-headers-develUpgrade libqt5-qtbase-platformtheme-gtk3Upgrade libqt5core5-32bitUpgrade libqt5gui5Upgrade libqt5network5-32bitUpgrade libqt5concurrent-devel-32bitUpgrade libqt5dbus-devel-32bitUpgrade libqt5kmssupport-devel-staticUpgrade libqt5concurrent5-32bitUpgrade libqt5printsupport5Upgrade libqt5printsupport-develUpgrade libqt5network5Upgrade libqt4-sql-postgresql-64bitUpgrade libqt4-sql-mysqlUpgrade libqt5opengl5Upgrade libqt5test-private-headers-develUpgrade libqt5gui-develUpgrade libqt5kmssupport-private-headers-develUpgrade libqt4-sql-unixODBC-64bitUpgrade libqt4-devel-32bitUpgrade libqt5concurrent5Upgrade libqt5bootstrap-devel-staticUpgrade libqt5network-develUpgrade libqt4-x11-32bitUpgrade libqt4-qt3support-64bit	Sep 19, 2020	Aug 12, 2020
Ubuntu	—	Upgrade libqt5core5a (Ubuntu Pro)Upgrade libqt5gui5Upgrade libqt5gui5 (Ubuntu Pro)Upgrade libqt5core5a	Sep 17, 2021	Aug 12, 2020

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence