PT-2023-4689 · Qt Company+11 · Qt+11
CVE-2023-32573
·
Publicado
2023-05-10
·
Atualizado
2026-05-28
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Qt versions prior to 5.15.14
Qt versions 6.0.x through 6.2.x before 6.2.9
Qt versions 6.3.x through 6.5.x before 6.5.1
Description
The issue is related to the QtSvg QSvgFont function in the Qt framework, which can be exploited to bypass directory restrictions. This could allow a remote attacker to cause a denial of service. The problem lies in the mishandling of the QSvgFont m unitsPerEm initialization.
Recommendations
For Qt versions prior to 5.15.14, update to version 5.15.14 or later.
For Qt versions 6.0.x through 6.2.x before 6.2.9, update to version 6.2.9 or later.
For Qt versions 6.3.x through 6.5.x before 6.5.1, update to version 6.5.1 or later.
Exploit
Correção
DoS
Divide By Zero
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Astra Linux
Centos
Debian
Linuxmint
Qt
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu