Gentoo Project

Qt Project

Security Bug Reports

• <dev-qt/qtwebsockets-5.15.0: WebSocket implementation accepts up to 2GB for frames and 2GB for messages (CVE-2018-21035)

  711120 - Assigned to Gentoo Security
• <dev-qt/qtcore-5.15.3: QProcess path vulnerability

  833583 - Assigned to Gentoo Security
• <dev-qt/qtsql-5.15.8-r1: Denial of service vulnerability in ODBC plugin

  893732 - Assigned to Gentoo Security
• <dev-qt/qtwebengine-5.15.13_p20240510: Multiple vulnerabilities

  931960 - Assigned to Gentoo Security
• <dev-qt/qtnetworkauth-5.15.14:5, <dev-qt/qtnetworkauth-6.7.1:6: badly seeded PRNG may result in guessable values (CVE-2024-36048)

  932337 - Assigned to Gentoo Security
• <dev-qt/qtxml-5.15.16-r1:5, <dev-qt/qtbase-6.8.0:6: Denial-of-Service in QDom classes of Qt XML module (CVE-2025-30348)

  953398 - Assigned to Gentoo Security
• dev-qt/qtcore:5, <dev-qt/qtbase-6.9.1:6: assertion DoS in qDecodeDataUrl() (CVE-2025-5455)

  957084 - Assigned to Gentoo Security
• <dev-qt/qtimageformats-6.9.1:6: crash with specifically crafted ICNS file (CVE-2025-5683)

  957935 - Assigned to Gentoo Security
• <dev-qt/qtbase-6.9.1-r2: denial of service issue in QColorTransferGenericFunction (CVE-2025-5992)

  959851 - Assigned to Gentoo Security
• dev-qt/qtdeclarative:5, <dev-qt/qtdeclarative-6.10.1:6: Improper validation of img tag size in Text component parser

  966269 - Assigned to Gentoo Security