dev-qt

Security Bug Reports

• <dev-qt/qtwebsockets-5.15.0: WebSocket implementation accepts up to 2GB for frames and 2GB for messages (CVE-2018-21035)

  711120 - Assigned to Gentoo Security
• <dev-qt/qtcore-5.15.3: QProcess path vulnerability

  833583 - Assigned to Gentoo Security
• <dev-qt/qtsql-5.15.8-r1: Denial of service vulnerability in ODBC plugin

  893732 - Assigned to Gentoo Security
• <dev-qt/qtcore-5.15.10-r1, <dev-qt/qtbase-6.5.2: potential buffer overflow issue in QXmlStreamReader

  911790 - Assigned to Gentoo Security
• =dev-qt/qtsvg-6.6.0-r0 loading invalid QML image source can cause application crash (CVE-2023-45872)

  915998 - Assigned to Gentoo Security
• <dev-qt/qtgui-5.15.12-r2, <dev-qt/qtbase-6.6.2: potential buffer overflow when reading KTX images (CVE-2024-25580)

  924647 - Assigned to Gentoo Security
• <dev-qt/qtbase-6.7.0-r2: invalid QStringConverter has an invalid pointer being passed as a callback which can allow modification of the stack (CVE-2024-33861)

  931096 - Assigned to Gentoo Security
• <dev-qt/qtwebengine-5.15.13_p20240510: Multiple vulnerabilities

  931960 - Assigned to Gentoo Security
• <dev-qt/qtnetworkauth-5.15.14:5, <dev-qt/qtnetworkauth-6.7.1:6: badly seeded PRNG may result in guessable values (CVE-2024-36048)

  932337 - Assigned to Gentoo Security
• <dev-qt/qtbase-6.7.2-r1:6, <dev-qt/qtnetwork-5.15.14-r1:5: HTTP/2 security may be compromised

  935869 - Assigned to Gentoo Security