CVE-2022-40983
An integer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted javascript code can trigger an in...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An integer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted javascript code can trigger an integer overflow during memory allocation, which can lead to arbitrary code execution. Target application would need to access a malicious web page to trigger this vulnerability.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2022-40983 qt6-declarative Corrigé dans: 6.4.2+dfsg~rc1-2
Références
- advisory github.com
- advisory nvd.nist.gov
- web talosintelligence.com
- web talosintelligence.com