PT-2022-6843 · Qt Company+1 · Qt+1
Published
2022-03-02
·
Updated
2024-02-22
·
CVE-2022-25634
CVSS v2.0
7.8
High
| AV:N/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Qt versions 5.15.8 and earlier
Qt versions 6.x through 6.2.3
Description
The issue is related to the LoadLibrary function in the Qt cross-platform framework, which can be exploited to bypass directory restrictions. This could allow a remote attacker to access protected information. The problem arises because Qt can load system library files from an unintended working directory.
Recommendations
For Qt versions 5.15.8 and earlier, update to a version later than 5.15.8 to resolve the issue.
For Qt versions 6.x through 6.2.3, update to a version later than 6.2.3 to resolve the issue.
As a temporary workaround, consider restricting the loading of system library files to intended directories until a patch is available.
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Qt