An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. When a SVG file with an image inside it is rendered, a QTextLayout buffer overflow can be triggered.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qt5-qtbaseUpgrade qt6-qtbase | Aug 22, 2024 | May 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade qt5-qtbase-develUpgrade qt5-qtbase-docUpgrade qt5-qtbase-staticUpgrade qt5-qtbaseUpgrade qt5-qtbase-examplesUpgrade qt5-qtbase-debuginfoUpgrade qt5-qtbase-odbcUpgrade qt5-qtbase-mysqlUpgrade qt5-qtbase-postgresqlUpgrade qt5-rpm-macrosUpgrade qt5-qtbase-guiUpgrade qt5-qtbase-common | Jul 27, 2023 | May 28, 2023 |
| Debian | — | Upgrade qtbase-opensource-srcUpgrade qt6-baseUpgrade qtbase-opensource-src-gles | Aug 24, 2023 | May 28, 2023 |
| F5 Big Ip | — | — | Dec 3, 2024 | May 28, 2023 |
| Gentoo Linux | — | Upgrade dev-qt/qtgui. | Feb 5, 2024 | May 28, 2023 |
| Suse | — | Upgrade libqt5test-private-headers-develUpgrade libQt6Core6Upgrade qt6-network-develUpgrade libqt5platformsupport-private-headers-develUpgrade libqt5test-devel-32bitUpgrade libqt5opengl5-32bitUpgrade libqt5xml5Upgrade libqt5gui-develUpgrade libqt5dbus-devel-32bitUpgrade libqt5kmssupport-private-headers-develUpgrade qt6-gui-private-develUpgrade libqt4-devel-doc-dataUpgrade libqt4-x11Upgrade libqt4-qt3supportUpgrade libqt5-qtbase-examples-32bitUpgrade libqt5bootstrap-devel-staticUpgrade libqt5concurrent5-32bitUpgrade libqt4-linguistUpgrade libqt5test5Upgrade qt6-kmssupport-private-develUpgrade qt6-test-private-develUpgrade libqt4-qt3support-32bitUpgrade libqt4-sql-sqliteUpgrade libqt4-sql-unixODBC-32bitUpgrade libqt5dbus-private-headers-develUpgrade libqt5sql-private-headers-develUpgrade libqt5sql5-mysql-32bitUpgrade libqt5dbus5-32bitUpgrade qt6-base-docs-htmlUpgrade qt6-widgets-private-develUpgrade libQt6Xml6Upgrade qt6-kmssupport-devel-staticUpgrade libqt4-devel-docUpgrade qt6-xml-private-develUpgrade qt6-printsupport-develUpgrade qt6-base-private-develUpgrade qt6-sql-develUpgrade libqt5bootstrap-devel-static-32bitUpgrade libqt5opengl-private-headers-develUpgrade libqt5test-develUpgrade libqt5opengl-develUpgrade libqt5concurrent-develUpgrade libQt6Concurrent6Upgrade libqt5-qtbase-examplesUpgrade libqt4-sql-mysql-32bitUpgrade qt6-base-docs-qchUpgrade libqt4-sql-sqlite-32bitUpgrade libqt5sql5Upgrade qt6-platformtheme-xdgdesktopportalUpgrade qt6-sql-unixODBCUpgrade libqt5sql5-unixodbcUpgrade qt6-xml-develUpgrade libQt6Sql6Upgrade libqt5printsupport-private-headers-develUpgrade libQt6OpenGL6Upgrade libqt5widgets5Upgrade qt4-x11-toolsUpgrade libqt5opengl-devel-32bitUpgrade libqt4-sql-postgresqlUpgrade libqt5core5-32bitUpgrade libqt5xml-devel-32bitUpgrade libqt5openglextensions-devel-static-32bitUpgrade libqt4-sql-32bitUpgrade libqt5test5-32bitUpgrade libQt6PrintSupport6Upgrade libqt5gui5-32bitUpgrade libqt5sql5-sqliteUpgrade libqt5network-devel-32bitUpgrade qt6-opengl-develUpgrade qt6-openglwidgets-develUpgrade libqt5xml-develUpgrade libQt6Widgets6Upgrade qt6-printsupport-cupsUpgrade libqt5platformsupport-devel-staticUpgrade libqt5sql5-mysqlUpgrade libqt5gui5Upgrade libqt4-x11-32bitUpgrade libqt5sql5-32bitUpgrade libqt5dbus-develUpgrade libqt5platformsupport-devel-static-32bitUpgrade libqt5-qtbase-platformtheme-xdgdesktopportalUpgrade libqt5widgets-private-headers-develUpgrade qt6-sql-postgresqlUpgrade libqt4-32bitUpgrade qt6-core-private-develUpgrade libqt5widgets5-32bitUpgrade qt6-gui-develUpgrade libqt5xml5-32bitUpgrade libqt5network-develUpgrade libqt5openglextensions-devel-staticUpgrade libqt5-qtbase-platformtheme-gtk3Upgrade qt6-widgets-develUpgrade qt6-base-develUpgrade qt6-test-develUpgrade libQt6OpenGLWidgets6Upgrade libqt5gui-devel-32bitUpgrade qt6-opengl-private-develUpgrade qt6-platformtheme-gtk3Upgrade qt6-network-private-develUpgrade libqt5sql5-sqlite-32bitUpgrade libqt5sql-devel-32bitUpgrade libqt5kmssupport-devel-staticUpgrade libqt5core5Upgrade libqt5printsupport5Upgrade libqt5core-devel-32bitUpgrade libqt5printsupport5-32bitUpgrade qt6-printsupport-private-develUpgrade libqt4Upgrade libqt5network5Upgrade qt6-base-common-develUpgrade libqt5sql-develUpgrade libqt4-sql-unixODBCUpgrade libqt5network5-32bitUpgrade qt6-platformsupport-private-develUpgrade qt6-platformsupport-devel-staticUpgrade libqt5platformheaders-develUpgrade qt6-core-develUpgrade libqt5-qtbase-develUpgrade qt6-base-examplesUpgrade libqt5core-develUpgrade libQt6Network6Upgrade libqt4-sql-postgresql-32bitUpgrade libqt5concurrent5Upgrade qt6-networkinformation-nmUpgrade libqt5widgets-devel-32bitUpgrade libqt5sql5-postgresqlUpgrade libqt5network-private-headers-develUpgrade libqt5dbus5Upgrade qt6-docs-commonUpgrade qt6-dbus-develUpgrade qt6-dbus-private-develUpgrade libqt5gui-private-headers-develUpgrade libqt4-develUpgrade libqt5printsupport-develUpgrade qt6-sql-mysqlUpgrade libQt6Test6Upgrade libQt6Gui6Upgrade libqt5concurrent-devel-32bitUpgrade qt6-network-tlsUpgrade libqt5core-private-headers-develUpgrade libqt5widgets-develUpgrade libqt5printsupport-devel-32bitUpgrade libqt5-qtbase-private-headers-develUpgrade qt6-networkinformation-glibUpgrade libqt5sql5-unixodbc-32bitUpgrade libqt4-sqlUpgrade qt6-sql-sqliteUpgrade qt6-concurrent-develUpgrade libQt6DBus6Upgrade libqt5sql5-postgresql-32bitUpgrade libqt5opengl5Upgrade libqt5-qtbase-common-develUpgrade libqt4-sql-mysqlUpgrade libqt4-private-headers-develUpgrade qt6-sql-private-devel | Jul 5, 2023 | May 28, 2023 |
| Ubuntu | — | No solution exists | Jul 25, 2025 | May 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub