CyberSecBulletin

Qt Project vulnerabilities

We track 2 vulnerabilities in Qt Project products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 12, 2023.

2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score

Latest Qt Project vulnerabilities

  • 8.8 High severity

    Qt: Heap-based Buffer Overflow

    CVE-2022-43591Qt ProjectEPSS 1.23%

    A buffer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted javascript code can trigger an out-of-bounds memory access, which can lead to arbitrary code execution. Target application would need to access a

  • 8.8 High severity

    Qt: Integer Overflow or Wraparound

    CVE-2022-40983Qt ProjectEPSS 1.15%

    An integer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted javascript code can trigger an integer overflow during memory allocation, which can lead to arbitrary code execution. Target application would