Vulnerabilities > QT > QT > 5.11.1

DATE CVE VULNERABILITY TITLE RISK
2018-12-26 CVE-2018-19871 Resource Exhaustion vulnerability in multiple products
An issue was discovered in Qt before 5.11.3.
network
qt opensuse CWE-400
4.3
2018-12-26 CVE-2018-19870 NULL Pointer Dereference vulnerability in multiple products
An issue was discovered in Qt before 5.11.3.
6.8
2018-12-26 CVE-2018-19869 Improper Input Validation vulnerability in multiple products
An issue was discovered in Qt before 5.11.3.
network
qt opensuse CWE-20
4.3
2018-12-26 CVE-2018-15518 Double Free vulnerability in multiple products
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
6.8
2018-12-05 CVE-2018-19865 Information Exposure Through Log Files vulnerability in multiple products
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
network
low complexity
qt opensuse CWE-532
5.0
2017-10-04 CVE-2017-15011 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in QT
The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service (application crash) via an unspecified string.
network
low complexity
qt CWE-119
5.0