End of life: 4/2/2025, Latest version: 6.8.3
End of life: 4/2/2025, Latest version: 6.8.3
End of life: 10/7/2024, Latest version: 6.7.3
End of life: 10/7/2024, Latest version: 6.7.3
In Qt 6.5.4, 6.5.5, and 6.6.2, QNetworkReply header data might be accessed via a dangling pointer in Qt for WebAssembly (wasm). (Earlier and later versions are unaffected.)
End of life: 4/2/2024, Latest version: 6.6.3
End of life: 4/2/2024, Latest version: 6.6.3
End of life: 3/31/2023, Latest version: 6.4.3
End of life: 3/31/2023, Latest version: 6.4.3
End of life: 9/28/2022, Latest version: 6.3.2
End of life: 9/28/2022, Latest version: 6.3.2
Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.
End of life: 4/11/2022, Latest version: 6.2.4
End of life: 4/11/2022, Latest version: 6.2.4
End of life: 9/30/2021, Latest version: 6.1.3
End of life: 9/30/2021, Latest version: 6.1.3
End of life: 5/5/2021, Latest version: 6.0.4
End of life: 5/5/2021, Latest version: 6.0.4
End of life: 12/8/2020, Latest version: 5.15.17
End of life: 12/8/2020, Latest version: 5.15.17
setMarkdown in Qt before 5.14.2 has a use-after-free related to QTextMarkdownImporter::insertBlock.
In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service (memory consumption).
Upstream Issue:
https://bugreports.qt.io/browse/QTBUG-70693
Upstream Fix:
https://codereview.qt-project.org/c/qt/qtwebsockets/+/284735
End of life: 12/12/2020, Latest version: 5.14.2
End of life: 12/12/2020, Latest version: 5.14.2
End of life: 6/19/2020, Latest version: 5.13.2
End of life: 6/19/2020, Latest version: 5.13.2
A possible QBpmHandler segmentation fault on malformed BMP file. A crafted filed could cause the application to crash.
Upstream patch:
https://codereview.qt-project.org/#/c/238749/
A possible QImage allocation failure was found in qgifhandler. A crafted file could cause the application to crash.
Upstream patch:
https://codereview.qt-project.org/#/c/235998/
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
End of life: 12/5/2021, Latest version: 5.12.12