Fluid Attacks Database

Description

In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont m_unitsPerEm initialization is mishandled.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 12	qt6-svg	>=0 <6.4.2-2	6.4.2-2
debian 13	qt6-svg	>=0 <6.4.2-2	6.4.2-2
debian 14	qt6-svg	>=0 <6.4.2-2	6.4.2-2
debian 11	qtsvg-opensource-src	=5.15.10-1 \|\| =5.15.10-2 \|\| =5.15.12-1 \|\| =5.15.13-1 \|\| =5.15.13-2 \|\| =5.15.15-1 \|\| =5.15.15-2 \|\| =5.15.17-1 \|\| =5.15.17-2 \|\| =5.15.17-3 \|\| =5.15.18-1 \|\| =5.15.2-3 \|\| =5.15.2-4 \|\| =5.15.3-1 \|\| =5.15.4-1 \|\| =5.15.4-2 \|\| =5.15.5-1 \|\| =5.15.6-1 \|\| =5.15.6-2 \|\| =5.15.7-1 \|\| =5.15.7-2 \|\| =5.15.8-1 \|\| =5.15.8-2 \|\| =5.15.8-3 \|\| =5.15.9-1	-
debian 12	qtsvg-opensource-src	>=0 <5.15.8-3	5.15.8-3
debian 13	qtsvg-opensource-src	>=0 <5.15.8-3	5.15.8-3
debian 14	qtsvg-opensource-src	>=0 <5.15.8-3	5.15.8-3
rpm rhel7	qt3	-	-
rpm rhel6	qt	-	-
rpm rhel7	qt	-	-

1-10 of 13

Aliases

1. CVE-2023-325732. NVD-2023-325733. OSV-DEBIAN-2023-325734. OSV-2023-325735. SECURITY-TRACKER-CVE-2023-32573

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.