Fluid Attacks Database

Description

In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not found in the PATH.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 13	qtbase-opensource-src	>=0 <5.15.2+dfsg-15	5.15.2+dfsg-15
debian 12	qt6-base	>=0 <6.2.4+dfsg-4	6.2.4+dfsg-4
debian 14	qtbase-opensource-src	>=0 <5.15.2+dfsg-15	5.15.2+dfsg-15
debian 11	qtbase-opensource-src	=5.15.2+dfsg-9 \|\| >=0 <5.15.2+dfsg-9+deb11u1	5.15.2+dfsg-9+deb11u1
debian 12	qtbase-opensource-src	>=0 <5.15.2+dfsg-15	5.15.2+dfsg-15
debian 11	qtbase-opensource-src-gles	=5.15.10+dfsg-1 \|\| =5.15.10+dfsg-2 \|\| =5.15.10+dfsg-3 \|\| =5.15.10+dfsg-4 \|\| =5.15.10+dfsg-5 \|\| =5.15.10+dfsg-6 \|\| =5.15.12+dfsg-1 \|\| =5.15.13+dfsg-1 \|\| =5.15.13+dfsg-2 \|\| =5.15.15+dfsg-1 \|\| =5.15.15+dfsg-2 \|\| =5.15.17+dfsg-1 \|\| =5.15.17+dfsg-2 \|\| =5.15.18+dfsg-1 \|\| =5.15.2+dfsg-4 \|\| =5.15.2+dfsg-5 \|\| =5.15.3+dfsg-1 \|\| =5.15.4+dfsg-1 \|\| =5.15.4+dfsg-2 \|\| =5.15.5+dfsg-1 \|\| =5.15.6+dfsg-1 \|\| =5.15.6+dfsg-2 \|\| =5.15.7+dfsg-1 \|\| =5.15.7+dfsg-2 \|\| =5.15.8+dfsg-1 \|\| =5.15.8+dfsg-2 \|\| =5.15.8+dfsg-3 \|\| =5.15.9+dfsg-1	-
debian 12	qtbase-opensource-src-gles	>=0 <5.15.4+dfsg-2	5.15.4+dfsg-2
debian 13	qtbase-opensource-src-gles	>=0 <5.15.4+dfsg-2	5.15.4+dfsg-2
debian 14	qtbase-opensource-src-gles	>=0 <5.15.4+dfsg-2	5.15.4+dfsg-2
debian 13	qt6-base	>=0 <6.2.4+dfsg-4	6.2.4+dfsg-4

1-10 of 13

Aliases

1. CVE-2022-252552. NVD-2022-252553. OSV-DEBIAN-2022-252554. OSV-2022-252555. SECURITY-TRACKER-CVE-2022-25255

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.