CVE-2023-38197

Name of the Vulnerable Software and Affected Versions Qt versions prior to 5.15.15 Qt versions 6.x prior to 6.2.10 Qt versions 6.3.x through 6.5.x prior to 6.5.3

Description The issue is related to infinite loops in recursive entity expansion, which can lead to a denial of service. This can be exploited by a remote attacker. The vulnerability is associated with the QXmlStreamReader function of the Qt cross-platform framework.

Recommendations For Qt versions prior to 5.15.15, update to version 5.15.15 or later. For Qt versions 6.x prior to 6.2.10, update to version 6.2.10 or later. For Qt versions 6.3.x through 6.5.x prior to 6.5.3, update to version 6.5.3 or later.