NA

CVE-2023-32763

Published: 28/05/2023 Updated: 01/05/2024
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

An issue exists in Qt prior to 5.15.15, 6.x prior to 6.2.9, and 6.3.x up to and including 6.5.x prior to 6.5.1. When a SVG file with an image inside it is rendered, a QTextLayout buffer overflow can be triggered.

Vulnerable Product Search on Vulmon Subscribe to Product

qt qt

Vendor Advisories

Debian Bug report logs - #1036702 qtbase-opensource-src-gles: CVE-2023-32763 Package: src:qtbase-opensource-src-gles; Maintainer for src:qtbase-opensource-src-gles is Debian Qt/KDE Maintainers <debian-qt-kde@listsdebianorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Wed, 24 May 2023 13:54:02 UTC Severi ...
In QT, there is an integer overflow in qfixed_ph when rendering SVG image on the minimal plugin (CVE-2023-32763) ...