Fluid Attacks Database

Description

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. When a SVG file with an image inside it is rendered, a QTextLayout buffer overflow can be triggered.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 14	qtbase-opensource-src	>=0 <5.15.8+dfsg-10	5.15.8+dfsg-10
debian 14	qtbase-opensource-src-gles	>=0 <5.15.8+dfsg-3	5.15.8+dfsg-3
debian 13	qt6-base	>=0 <6.4.2+dfsg-8	6.4.2+dfsg-8
debian 14	qt6-base	>=0 <6.4.2+dfsg-8	6.4.2+dfsg-8
debian 11	qtbase-opensource-src	=5.15.2+dfsg-9 \|\| >=0 <5.15.2+dfsg-9+deb11u1	5.15.2+dfsg-9+deb11u1
debian 12	qtbase-opensource-src	>=0 <5.15.8+dfsg-10	5.15.8+dfsg-10
debian 11	qtbase-opensource-src-gles	=5.15.10+dfsg-1 \|\| =5.15.10+dfsg-2 \|\| =5.15.10+dfsg-3 \|\| =5.15.10+dfsg-4 \|\| =5.15.10+dfsg-5 \|\| =5.15.10+dfsg-6 \|\| =5.15.12+dfsg-1 \|\| =5.15.13+dfsg-1 \|\| =5.15.13+dfsg-2 \|\| =5.15.15+dfsg-1 \|\| =5.15.15+dfsg-2 \|\| =5.15.17+dfsg-1 \|\| =5.15.17+dfsg-2 \|\| =5.15.18+dfsg-1 \|\| =5.15.2+dfsg-4 \|\| =5.15.2+dfsg-5 \|\| =5.15.3+dfsg-1 \|\| =5.15.4+dfsg-1 \|\| =5.15.4+dfsg-2 \|\| =5.15.5+dfsg-1 \|\| =5.15.6+dfsg-1 \|\| =5.15.6+dfsg-2 \|\| =5.15.7+dfsg-1 \|\| =5.15.7+dfsg-2 \|\| =5.15.8+dfsg-1 \|\| =5.15.8+dfsg-2 \|\| =5.15.8+dfsg-3 \|\| =5.15.9+dfsg-1	-
debian 12	qtbase-opensource-src-gles	>=0 <5.15.8+dfsg-3	5.15.8+dfsg-3
debian 13	qtbase-opensource-src-gles	>=0 <5.15.8+dfsg-3	5.15.8+dfsg-3
debian 12	qt6-base	>=0 <6.4.2+dfsg-8	6.4.2+dfsg-8

1-10 of 11

Aliases

1. CVE-2023-327632. NVD-2023-327633. OSV-DEBIAN-2023-327634. OSV-2023-327635. SECURITY-TRACKER-CVE-2023-32763

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.