CVE-2012-6093

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.78%

Published

Feb 24, 2013

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5, when using certain versions of openSSL, uses an "incompatible structure layout" that can read memory from the wrong location, which causes Qt to report an incorrect error when certificate validation fails and might cause users to make unsafe security decisions to accept a certificate.

Weaknesses (CWE)

CWE-310

Affected Products (25)

qt · qtvulnerable

qt · qt

References (20)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=697582

http://lists.opensuse.org/opensuse-updates/2013-01/msg00086.html

http://lists.opensuse.org/opensuse-updates/2013-01/msg00089.html

http://lists.opensuse.org/opensuse-updates/2013-02/msg00014.html

http://lists.qt-project.org/pipermail/announce/2013-January/000020.html

Vendor Advisory

http://qt.gitorious.org/qt/qt/commit/3b14dc93cf0ef06f1424d7d6319a1af4505faa53%20%284.7%29

http://qt.gitorious.org/qt/qt/commit/691e78e5061d4cbc0de212d23b06c5dffddf2098%20%284.8%29

KEV Catalog EPSS Scores Vendors All CVEs