REDHAT-BUG-2369722: Medium severity The Qt Company Qt vulnerability
An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code.
If the function was called with malformed data, for example, an URL that contained a "charset" parameter that lacked a value (such as "data:charset,"), and Qt was built with assertions enabled, then it would hit an assertion, resulting in a denial of service (abort).
This impacts Qt up to 5.15.18, 6.0.0->6.5.8, 6.6.0->6.8.3 and 6.9.0. This has been fixed in 5.15.19, 6.5.9, 6.8.4 and 6.9.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Qtto a version that resolves this vulnerability.Fixed in 5.15.19 - Upgrade
Upgrade
Qtto a version that resolves this vulnerability.Fixed in 6.5.9 - Upgrade
Upgrade
Qtto a version that resolves this vulnerability.Fixed in 6.8.4 - Upgrade
Upgrade
Qtto a version that resolves this vulnerability.Fixed in 6.9.1
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2369722?
The severity of REDHAT-BUG-2369722 is classified as a security vulnerability affecting the Qt software.
How do I fix REDHAT-BUG-2369722?
To fix REDHAT-BUG-2369722, update your Qt installation to version 5.15.19 or later, or to versions above 6.5.8, 6.8.3, or below 6.9.0 as applicable.
What software is affected by REDHAT-BUG-2369722?
REDHAT-BUG-2369722 affects Qt versions up to 5.15.18, between 6.0.0 and 6.5.8, between 6.6.0 and 6.8.3, and up to 6.9.0.
What causes the vulnerability in REDHAT-BUG-2369722?
The vulnerability in REDHAT-BUG-2369722 is caused by the qDecodeDataUrl() function mishandling malformed data URLs with missing charset values.
Is REDHAT-BUG-2369722 exploitable in user code?
Yes, REDHAT-BUG-2369722 can potentially be exploited in user code that utilizes the vulnerable qDecodeDataUrl() function.