CVE-2018-19869: Input Validation
Published Dec 21, 2018
·Updated
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
Other sources
It was found that qt-qtsvg incorrectly checks for the end of input while parsing url references. A malformed url reference could cause the application to crash.
References:
https://codereview.qt-project.org/#/c/234142/
— Red Hat
Affected Software
3 affected componentsFixes available
Qt QT<5.11.3
openSUSE Leap=15.0
debian/qtsvg-opensource-src
5.15.2-35.15.8-35.15.15-25.15.17-3
Remediation
Patch Available
Event History
Dec 21, 2018
Data Sourced
via Red Hat·10:11 AM
DescriptionSeverityAffected Software
Dec 26, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Data Sourced
via NVD·09:29 PM
RemedyDescriptionSeverityWeaknessAffected Software
May 28, 2026
Data Sourced
via Ubuntu·04:16 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·04:16 PM
Description
Data Sourced
via Debian·04:17 PM
DescriptionAffected Software