CVE-2022-43591
EUVD-2022-4658712.01.2023, 17:15
A buffer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted javascript code can trigger an out-of-bounds memory access, which can lead to arbitrary code execution. Target application would need to access a malicious web page to trigger this vulnerability.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| qt | qt | 6.3.2 |
𝑥
= Vulnerable software versions
Debian Releases
Debian Product | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| qt6-declarative |
| ||||||||
| qtdeclarative-opensource-src |
| ||||||||
| qtdeclarative-opensource-src-gles |
|
Ubuntu Releases