CVE-2023-24607

Published: Apr 15, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3.

Affected (3)

Products: Qt: Qt

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Qt Qt	From 5.0.0 to 5.15.13
Qt Qt	From 6.0.0 to 6.2.8
Qt Qt	From 6.3.0 to 6.4.3

References (16)

https://codereview.qt-project.org/c/qt/qtbase/+/456216

Source: cve@mitre.org

Issue Tracking

https://codereview.qt-project.org/c/qt/tqtc-qtbase/+/456217

Source: cve@mitre.org

Permissions Required

https://codereview.qt-project.org/c/qt/tqtc-qtbase/+/456238

Source: cve@mitre.org

Permissions Required

https://download.qt.io/official_releases/qt/5.15/CVE-2023-24607-qtbase-5.15.diff

Source: cve@mitre.org

Vendor Advisory

https://github.com/qt/qtbase/commit/aaf1381eab6292aa0444a5eadcc24165b6e1c02d

Source: cve@mitre.org

PatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2024/04/msg00027.html

Source: cve@mitre.org

https://www.qt.io/blog/security-advisory-qt-sql-odbc-driver-plugin

Source: cve@mitre.org

Product

https://www.qt.io/blog/tag/security

Source: cve@mitre.org

Release Notes

https://codereview.qt-project.org/c/qt/qtbase/+/456216