Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attackers to cause a denial of service (DoS).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qt5-qtsvg-examplesUpgrade qt5-qtsvg-docUpgrade qt5-qtsvg-develUpgrade qt5-qtsvgUpgrade qt5-qtsvg-debuginfo | Sep 8, 2023 | Aug 11, 2023 |
| Debian | — | Upgrade qtsvg-opensource-src | Jul 30, 2024 | Aug 11, 2023 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 11, 2023 |
| Ubuntu | — | Upgrade libqt5svg5 (Ubuntu Pro) | May 28, 2026 | Aug 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub