Asymmetric denial of service In qtbase-opensource-src
Description
The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 11 | 5.3.2+dfsg-5 | ||
debian 12 | 5.3.2+dfsg-5 | ||
debian 13 | 5.3.2+dfsg-5 | ||
 rpm rhel6 | - | - | |
debian 14 | 5.3.2+dfsg-5 | ||
rpm rhel7 | - | - | |
rpm rhel5 | - | - | |
rpm rhel6 | - | - | |
rpm rhel5 | - | - | |
rpm rhel7 | - | - |
Aliases
1. 2. 3. 4. 5.