An issue has been fixed in Qt versions 5.14.0 where QPluginLoader attempts to load plugins relative to the working directory, allowing attackers to execute arbitrary code via crafted files.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qt5-qtbase-debuginfoUpgrade qt5-qtbaseUpgrade qt5-rpm-macrosUpgrade qt5-qtbase-docUpgrade qt5-qtbase-develUpgrade qt5-qtbase-guiUpgrade qt5-qtbase-staticUpgrade qt5-qtbase-mysqlUpgrade qt5-qtbase-odbcUpgrade qt5-qtbase-examplesUpgrade qt5-qtbase-postgresqlUpgrade qt5-qtbase-common | Aug 8, 2023 | Aug 9, 2021 |
| Debian | — | Upgrade qtbase-opensource-src-glesUpgrade qtbase-opensource-src | Nov 29, 2021 | Aug 9, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qt5-qtbaseUpgrade qt5-qtbase-guiUpgrade qt5-qtbase-common | Nov 2, 2021 | Aug 9, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/qt5 to version 5.12.7-11.4.21.0.1.69.0 on Solaris 11.4 | Aug 27, 2021 | Aug 9, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 9, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub