Out-of-bounds read In qt6
Description
A flaw was found in qt6. An attacker could exploit this vulnerability to cause a Denial of Service (DoS) by crashing the application. When the VectorImage component processes a specially crafted Scalable Vector Graphics (SVG) file, an integer calculation error triggers an invalid memory access (null-pointer dereference). To trigger this issue, an attacker must persuade a user or application to load the malicious SVG file.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component |
|---|---|
rpm rhel10 |
Aliases
1. 2. 3.