Описание
Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation. This issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the <img> tag could cause an application to become unresponsive. This issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| qt6-declarative | unfixed | package | ||
| qt6-declarative | no-dsa | trixie | package | |
| qt6-declarative | no-dsa | bookworm | package | |
| qtdeclarative-opensource-src | fixed | 5.15.17+dfsg-4 | package | |
| qtdeclarative-opensource-src | no-dsa | trixie | package | |
| qtdeclarative-opensource-src | no-dsa | bookworm | package | |
| qtdeclarative-opensource-src | postponed | bullseye | package | |
| qtdeclarative-opensource-src-gles | fixed | 5.15.18+dfsg-1 | experimental | package |
| qtdeclarative-opensource-src-gles | unfixed | package | ||
| qtdeclarative-opensource-src-gles | no-dsa | trixie | package | |
| qtdeclarative-opensource-src-gles | no-dsa | bookworm | package | |
| qtdeclarative-opensource-src-gles | postponed | bullseye | package |
Примечания
https://codereview.qt-project.org/c/qt/qtdeclarative/+/687239
https://codereview.qt-project.org/c/qt/qtdeclarative/+/687766
EPSS
Связанные уязвимости
Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation. This issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the <img> tag could cause an application to become unresponsive. This issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.
Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation. This issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the <img> tag could cause an application to become unresponsive. This issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.
Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation. This issue affects users of the Text component in Qt Quick. Missing validation of the width and height in the <img> tag could cause an application to become unresponsive. This issue affects Qt: from 5.0.0 through 6.5.10, from 6.6.0 through 6.8.5, from 6.9.0 through 6.10.0.
Уязвимость тега <img> набора плагинов QML и Qt Quick для Qt6 Qt6 Declarative, позволяющая нарушителю вызвать отказ в обслуживании
EPSS