All errata/p10/ALT-PU-2025-16575-1
ALT-PU-2025-16575-1

Package update qt5-doc in branch p10

Version5.15.16-alt1
Published2025-01-21
Max severityMEDIUM
Severity:

Closed issues (2)

BDU:2023-05913
LOW3.0

Уязвимость функции addApplicationFont{FromData] класса QFontDatabase кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании

Published: 2023-09-21
CVSS 3.xLOW 3.0
CVSS:3.x/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
CVSS 2.0LOW 2.3
CVSS:2.0/AV:A/AC:M/Au:S/C:N/I:N/A:P
References
CVE-2023-43114
MEDIUM5.5

An issue was discovered in Qt before 5.15.16, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3 on Windows. When using the GDI font engine, if a corrupted font is loaded via QFontDatabase::addApplicationFont{FromData], then it can cause the application to crash because of missing length checks.

Published: 2023-09-18Modified: 2024-11-21
CVSS 3.xMEDIUM 5.5
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H