← Back

CVE-2023-43114

nvd nist
Published: Sep 18, 2023Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

An issue was discovered in Qt before 5.15.16, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3 on Windows. When using the GDI font engine, if a corrupted font is loaded via QFontDatabase::addApplicationFont{FromData], then it can cause the application to crash because of missing length checks.

Affected (3)

Products: Qt: Qt
Qt
1 product
Qt
Configuration A
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Qt
Qt
Before 5.15.16
Qt
From 6.0.0 to 6.2.10
Qt
From 6.5.0 to 6.5.3
Running on/withPlatform Versions
Microsoft
Windows
All versions

References (2)

Source: cve@mitre.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.