REDHAT-BUG-269001: Buffer Overflow
Dirk Mueller reported an off by one buffer overflow flaw in the way QT parses certain unicode strings.
To quote Dirk:
Ive found a off-by-one buffer overflow in QUtf8Decoder::toUnicode(). It is not exploitable with Qt 4.x or above because there is an additional QChar(0) being allocated in QString, however it is still a bug there, as the array returned by utf16() etc is no longer terminated properly.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-269001?
The severity of REDHAT-BUG-269001 is classified as a buffer overflow vulnerability.
How do I fix REDHAT-BUG-269001?
To fix REDHAT-BUG-269001, ensure you are using Qt version 4.x or above, as it includes mitigations for this vulnerability.
What software is affected by REDHAT-BUG-269001?
REDHAT-BUG-269001 affects Qt versions below 4.x.
Can REDHAT-BUG-269001 be exploited?
REDHAT-BUG-269001 is not exploitable in Qt 4.x or higher due to additional checks implemented in those versions.
Who reported the vulnerability REDHAT-BUG-269001?
The vulnerability REDHAT-BUG-269001 was reported by Dirk Mueller.