CVE-2018-19872

Summary

An issue was discovered in Qt 5.11. A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://bugreports.qt.io/browse/QTBUG-69449
• http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XS6G3ZDFCHWFQD4CFXWFPHREOHBBDTD7/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FO7IBY7YYKNMRD5OI3JNNUI42WEM7NUV/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2C5FHCR4A636BLTAXL76WWDJLOAHGNYG/
• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00080.html
• https://usn.ubuntu.com/4275-1/
• https://lists.debian.org/debian-lts-announce/2020/09/msg00024.html
• https://lists.debian.org/debian-lts-announce/2020/09/msg00023.html

References

• https://bugreports.qt.io/browse/QTBUG-69449
• http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XS6G3ZDFCHWFQD4CFXWFPHREOHBBDTD7/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FO7IBY7YYKNMRD5OI3JNNUI42WEM7NUV/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2C5FHCR4A636BLTAXL76WWDJLOAHGNYG/
• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00080.html
• https://usn.ubuntu.com/4275-1/
• https://lists.debian.org/debian-lts-announce/2020/09/msg00024.html
• https://lists.debian.org/debian-lts-announce/2020/09/msg00023.html

• ←Previous
• Next→