A buffer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2

An integer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2

An issue was discovered in Qt before 5.11.3

QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document

The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service (memory corruption)…

Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt

Type confusion and heap-buffer-overflow in Qt SVG marker handling causing application crash

Improper validation of <img> tag size in Text component parser

Possible denial of service when passing malformed data in a URL to qDecodeDataUrl

Possible QML code injection in VectorImage component

In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not found in the PATH

An issue has been fixed in Qt versions 5.14.0 where QPluginLoader attempts to load plugins relative to the working directory, allowing attackers to execute arbitrary code via…

In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXmlStreamReader via a crafted XML string that triggers a…

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1

Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory

Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRasterPaintEngine::fill and QPaintEngineEx::stroke)

Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial of service to QSslSocket…

In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages

Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564

A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3

The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service…

Improper Link Resolution Before File Access in QFileSystemEngine on Windows

Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access

Denial-of-service vulnerability in the SVG parser and renderer impacts Qt

Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qt

Uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml)

A flaw was found in Qt