Gentoo Project

Qt Project

Security Bug Reports

• <dev-qt/qtwebsockets-5.15.0: WebSocket implementation accepts up to 2GB for frames and 2GB for messages (CVE-2018-21035)

  711120 - Assigned to Gentoo Security
• <dev-qt/qtcore-5.15.3: QProcess path vulnerability

  833583 - Assigned to Gentoo Security
• <dev-qt/qtsql-5.15.8-r1: Denial of service vulnerability in ODBC plugin

  893732 - Assigned to Gentoo Security
• =dev-qt/qtsvg-6.6.0-r0 loading invalid QML image source can cause application crash (CVE-2023-45872)

  915998 - Assigned to Gentoo Security
• <dev-qt/qtgui-5.15.12-r2, <dev-qt/qtbase-6.6.2: potential buffer overflow when reading KTX images (CVE-2024-25580)

  924647 - Assigned to Gentoo Security
• <dev-qt/qtbase-6.7.0-r2: invalid QStringConverter has an invalid pointer being passed as a callback which can allow modification of the stack (CVE-2024-33861)

  931096 - Assigned to Gentoo Security
• <dev-qt/qtwebengine-5.15.13_p20240510: Multiple vulnerabilities

  931960 - Assigned to Gentoo Security
• <dev-qt/qtnetworkauth-5.15.14:5, <dev-qt/qtnetworkauth-6.7.1:6: badly seeded PRNG may result in guessable values (CVE-2024-36048)

  932337 - Assigned to Gentoo Security
• <dev-qt/qtbase-6.7.2-r1:6, <dev-qt/qtnetwork-5.15.14-r1:5: HTTP/2 security may be compromised

  935869 - Assigned to Gentoo Security
• <dev-qt/qtxml-5.15.16-r1:5, <dev-qt/qtbase-6.8.0:6: Denial-of-Service in QDom classes of Qt XML module (CVE-2025-30348)

  953398 - Assigned to Gentoo Security
• <dev-qt/qtbase-6.8.3-r1: heap-buffer-overflow issue in QTextMarkdownImporter (CVE-2025-3512)

  954261 - Assigned to Gentoo Security