logo

Database

Out-of-bounds read In qt6

Description

A flaw was found in qt6. An attacker could exploit this vulnerability to cause a Denial of Service (DoS) by crashing the application. When the VectorImage component processes a specially crafted Scalable Vector Graphics (SVG) file, an integer calculation error triggers an invalid memory access (null-pointer dereference). To trigger this issue, an attacker must persuade a user or application to load the malicious SVG file.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
FLAT-FRQAD – Vulnerability | Fluid Attacks Database