CVE-2024-25580

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-25580
An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur via a crafted KTX image file.

6.2 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.5 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.qt.io/blog/security-advisory-potential-buffer-overflow-when-reading-ktx-images
https://www.qt.io/blog/security-advisory-potential-buffer-overflow-when-reading-ktx-images
Configurations

No configuration.

History

21 Nov 2024, 09:01

Type Values Removed Values Added
References () https://www.qt.io/blog/security-advisory-potential-buffer-overflow-when-reading-ktx-images - () https://www.qt.io/blog/security-advisory-potential-buffer-overflow-when-reading-ktx-images -

29 Oct 2024, 20:35

Type Values Removed Values Added
CWE CWE-120
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.2

27 Mar 2024, 12:29

Type Values Removed Values Added
Summary
  • (es) Se descubrió un problema en gui/util/qktxhandler.cpp en Qt antes de 5.15.17, 6.x antes de 6.2.12, 6.3.x hasta 6.5.x antes de 6.5.5 y 6.6.x antes de 6.6.2. Se puede producir un desbordamiento del búfer y un bloqueo de la aplicación a través de un archivo de imagen KTX manipulado.

27 Mar 2024, 03:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-27 03:15

Updated : 2024-11-21 09:01

NVD link : CVE-2024-25580

Mitre link : CVE-2024-25580

CVE.ORG link : CVE-2024-25580

JSON object : View

Products Affected

No product.

CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')