Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Possible denial of service when passing malformed data in a URL to qDecodeDataUrl
Vulnerability Description
An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. If the function was called with malformed data, for example, an URL that contained a "charset" parameter that lacked a value (such as "data:charset,"), and Qt was built with assertions enabled, then it would hit an assertion, resulting in a denial of service (abort). This impacts Qt up to 5.15.18, 6.0.0->6.5.8, 6.6.0->6.8.3 and 6.9.0. This has been fixed in 5.15.19, 6.5.9, 6.8.4 and 6.9.1.
CVSS Information
N/A
Vulnerability Type
输入验证不恰当
Vulnerability Title
Qt 安全漏洞
Vulnerability Description
Qt是Qt开源的一个跨平台的应用程序开发框架。 Qt 5.15.18及之前版本、6.0.0至6.5.8版本、6.6.0至6.8.3版本和6.9.0版本存在安全漏洞，该漏洞源于函数qDecodeDataUrl处理畸形数据时导致拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A