Known vulnerabilities in qtbase-opensource-src (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:qtbase-opensource-src_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 17
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting qtbase-opensource-src (Ubuntu package) qtbase-opensource-src (Ubuntu package) is affected by 17 known vulnerabilities: 1 high, 8 medium, 8 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123611 - Missing release of memory after effective lifetime
CVE-2020-13962
CWE-401 Medium
No
No
5.5.1+dfsg-16ubuntu7.7+esm2, 5.9.5+dfsg-0ubuntu2.6+esm2, 5.12.8+dfsg-0ubuntu2.1+esm3, 5.15.3+dfsg-2ubuntu0.2+esm3, 5.15.13+dfsg-1ubuntu1+esm1 06.03.2026 SB2020060985
SB2026030628
#VU94613 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2024-39936
CWE-367 Low
No
No
5.5.1+dfsg-16ubuntu7.7+esm2, 5.9.5+dfsg-0ubuntu2.6+esm2, 5.12.8+dfsg-0ubuntu2.1+esm3, 5.15.3+dfsg-2ubuntu0.2+esm3, 5.15.13+dfsg-1ubuntu1+esm1 19.07.2024 SB2024071919
SB2024071921
SB2024071922
and 25 more
#VU87163 - Memory corruption
CVE-2024-25580
CWE-119 Medium
No
No
5.12.8+dfsg-0ubuntu2.1+esm2, 5.15.3+dfsg-2ubuntu0.2+esm2 06.03.2024 SB2024030642
SB2024030649
SB2024030650
and 15 more
#VU85067 - Integer overflow
CVE-2023-51714
CWE-190 High
No
No
5.5.1+dfsg-16ubuntu7.7+esm2, 5.9.5+dfsg-0ubuntu2.6+esm2, 5.12.8+dfsg-0ubuntu2.1+esm3, 5.15.3+dfsg-2ubuntu0.2+esm3, 5.15.13+dfsg-1ubuntu1+esm1 08.01.2024 SB2024010825
SB2024010826
SB2024011838
and 13 more
#VU78696 - Improper Certificate Validation
CVE-2023-34410
CWE-295 Medium
No
No
5.5.1+dfsg-16ubuntu7.7+esm1, 5.9.5+dfsg-0ubuntu2.6+esm1, 5.12.8+dfsg-0ubuntu2.1+esm1, 5.15.3+dfsg-2ubuntu0.2+esm1 26.07.2023 SB2023072654
SB2023072656
SB2023072657
and 28 more
#VU76667 - Out-of-bounds read
CVE-2023-33285
CWE-125 Medium
No
No
5.5.1+dfsg-16ubuntu7.7+esm1, 5.9.5+dfsg-0ubuntu2.6+esm1, 5.12.8+dfsg-0ubuntu2.1+esm1, 5.15.3+dfsg-2ubuntu0.2+esm1 30.05.2023 SB2023053067
SB2023072656
SB2023072657
and 17 more
#VU76666 - Cleartext Transmission of Sensitive Information
CVE-2023-32762
CWE-319 Medium
No
No
5.5.1+dfsg-16ubuntu7.7+esm1, 5.9.5+dfsg-0ubuntu2.6+esm1, 5.12.8+dfsg-0ubuntu2.1+esm1, 5.15.3+dfsg-2ubuntu0.2+esm1 30.05.2023 SB2023053067
SB2023072656
SB2023072905
and 16 more
#VU74061 - Improper input validation
CVE-2023-24607
CWE-20 Medium
No
No
5.5.1+dfsg-16ubuntu7.7+esm1, 5.9.5+dfsg-0ubuntu2.6+esm1, 5.12.8+dfsg-0ubuntu2.1+esm1, 5.15.3+dfsg-2ubuntu0.2+esm1 27.03.2023 SB2023032752
SB2023032757
SB2023072656
and 13 more
#VU61830 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25255
CWE-94 Low
No
No
5.5.1+dfsg-16ubuntu7.7+esm2, 5.9.5+dfsg-0ubuntu2.6+esm2, 5.12.8+dfsg-0ubuntu2.1+esm3, 5.15.3+dfsg-2ubuntu0.2+esm3, 5.15.13+dfsg-1ubuntu1+esm1 04.04.2022 SB2022021640
SB2022040411
SB2022110842
and 15 more
#VU46199 - Out-of-bounds read
CVE-2020-17507
CWE-125 Medium
No
No
5.5.1+dfsg-16ubuntu7.7+esm2, 5.9.5+dfsg-0ubuntu2.6+esm2, 5.12.8+dfsg-0ubuntu2.1+esm3, 5.15.3+dfsg-2ubuntu0.2+esm3, 5.15.13+dfsg-1ubuntu1+esm1 12.08.2020 SB2020081278
SB2020081816
SB2020091405
and 17 more
#VU24783 - Untrusted Search Path
CVE-2020-0570
CWE-426 Low
No
No
5.5.1+dfsg-16ubuntu7.7, 5.9.5+dfsg-0ubuntu2.5, 5.12.4+dfsg-4ubuntu1.1 30.01.2020 SB2020013015
SB2020021012
SB2020032627
and 5 more
#VU24782 - Untrusted Search Path
CVE-2020-0569
CWE-426 Low
No
No
5.5.1+dfsg-16ubuntu7.7, 5.9.5+dfsg-0ubuntu2.5, 5.12.4+dfsg-4ubuntu1.1 30.01.2020 SB2020013014
SB2020021012
SB2020021203
and 4 more
#VU22483 - Out-of-bounds read
CVE-2019-18281
CWE-125 Low
No
No
5.5.1+dfsg-16ubuntu7.7, 5.9.5+dfsg-0ubuntu2.5, 5.12.4+dfsg-4ubuntu1.1 02.11.2019 SB2019110203
SB2019110204
SB2020021012
and 2 more
#VU18316 - Divide By Zero
CVE-2018-19872
CWE-369 Medium
No
No
5.5.1+dfsg-16ubuntu7.7, 5.9.5+dfsg-0ubuntu2.5, 5.12.4+dfsg-4ubuntu1.1 18.04.2019 SB2019041816
SB2020021012
SB2018122608
and 5 more
#VU17339 - Memory corruption
CVE-2018-19873
CWE-119 Low
No
No
5.5.1+dfsg-16ubuntu7.6, 5.9.5+dfsg-0ubuntu2.1, 5.11.1+dfsg-7ubuntu3.1 31.01.2019 SB2019012806
SB2019022710
SB2019060308
and 8 more
#VU17338 - NULL Pointer Dereference
CVE-2018-19870
CWE-476 Low
No
No
5.5.1+dfsg-16ubuntu7.6, 5.9.5+dfsg-0ubuntu2.1, 5.11.1+dfsg-7ubuntu3.1 31.01.2019 SB2019012806
SB2019041816
SB2019060308
and 4 more
#VU17337 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-15518
CWE-611 Low
No
No
5.5.1+dfsg-16ubuntu7.6, 5.9.5+dfsg-0ubuntu2.1, 5.11.1+dfsg-7ubuntu3.1 31.01.2019 SB2019012806
SB2019022710
SB2019060308
and 8 more