Unrated

In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont m_unitsPerEm initialization is mishandled...

CVE-2023-32573 First seen on SecPulse May 10, 2023

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2023-32573 qt6-svg Fixed in: 6.4.2-2
Ubuntu UBUNTU-CVE-2023-32573 qtsvg-opensource-src

Original description The description as published by the source.

In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont m_unitsPerEm initialization is mishandled.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory lists.fedoraproject.org
advisory nvd.nist.gov
web codereview.qt-project.org
web lists.debian.org

Key facts

Severity: Unrated
Published: May 10, 2023
First seen on SecPulse: May 10, 2023

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)00:20