In Qt 6.5.4, 6.5.5, and 6.6.2, QNetworkReply header data might be accessed via a dangling pointer in Qt for WebAssembly (wasm). (Earlier and later versions are unaffected.)
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade libQt6PrintSupport6Upgrade qt6-gui-private-develUpgrade libQt6OpenGL6Upgrade libQt6Concurrent6Upgrade libQt6DBus6Upgrade qt6-widgets-private-develUpgrade libQt6Gui6Upgrade qt6-xml-develUpgrade qt6-dbus-private-develUpgrade qt6-network-develUpgrade qt6-sql-develUpgrade qt6-xml-private-develUpgrade qt6-kmssupport-devel-staticUpgrade libQt6Sql6Upgrade qt6-sql-unixODBCUpgrade qt6-platformtheme-xdgdesktopportalUpgrade qt6-opengl-develUpgrade qt6-printsupport-develUpgrade libQt6OpenGLWidgets6Upgrade qt6-printsupport-private-develUpgrade qt6-base-docs-htmlUpgrade qt6-network-private-develUpgrade qt6-platformsupport-private-develUpgrade libQt6Xml6Upgrade qt6-kmssupport-private-develUpgrade qt6-base-develUpgrade qt6-docs-commonUpgrade qt6-network-tlsUpgrade qt6-test-develUpgrade qt6-core-private-develUpgrade qt6-gui-develUpgrade qt6-base-examplesUpgrade libQt6Widgets6Upgrade qt6-widgets-develUpgrade qt6-test-private-develUpgrade qt6-concurrent-develUpgrade qt6-sql-postgresqlUpgrade qt6-openglwidgets-develUpgrade qt6-networkinformation-nmUpgrade qt6-exampleicons-devel-staticUpgrade qt6-base-docs-qchUpgrade qt6-base-common-develUpgrade libQt6Network6Upgrade libQt6Core6Upgrade qt6-sql-sqliteUpgrade qt6-sql-mysqlUpgrade qt6-platformsupport-devel-staticUpgrade qt6-networkinformation-glibUpgrade qt6-platformtheme-gtk3Upgrade qt6-sql-private-develUpgrade qt6-core-develUpgrade qt6-base-private-develUpgrade qt6-opengl-private-develUpgrade qt6-dbus-develUpgrade libQt6Test6Upgrade qt6-printsupport-cups | Apr 10, 2024 | Mar 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub