CVE-2018-19870

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.42%

Published

Dec 26, 2018

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.

Weaknesses (CWE)

CWE-476

Affected Products (4)

qt · qt (up to 5.11.3)vulnerable

debian · debian_linuxvulnerable

opensuse · leapvulnerable

References (20)

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00080.html

Mailing ListThird Party Advisory

https://access.redhat.com/errata/RHSA-2019:2135

https://access.redhat.com/errata/RHSA-2019:3390

https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/

Release NotesVendor Advisory

https://codereview.qt-project.org/#/c/235998/

PatchVendor Advisory

https://lists.debian.org/debian-lts-announce/2019/01/msg00004.html

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2019/05/msg00014.html

https://lists.debian.org/debian-lts-announce/2020/09/msg00023.html

https://usn.ubuntu.com/4003-1/

https://www.debian.org/security/2019/dsa-4374

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00080.html

Mailing ListThird Party Advisory

https://access.redhat.com/errata/RHSA-2019:2135

https://access.redhat.com/errata/RHSA-2019:3390

https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/

Release NotesVendor Advisory

https://codereview.qt-project.org/#/c/235998/

PatchVendor Advisory

https://lists.debian.org/debian-lts-announce/2019/01/msg00004.html

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2019/05/msg00014.html

https://lists.debian.org/debian-lts-announce/2020/09/msg00023.html

https://usn.ubuntu.com/4003-1/

https://www.debian.org/security/2019/dsa-4374

Third Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs