Qt Company · Qt · CVE-2023-37369
**Name of the Vulnerable Software and Affected Versions**
Qt versions prior to 5.15.15
Qt versions 6.x prior to 6.2.9
Qt versions 6.3.x through 6.5.x prior to 6.5.2
**Description**
The issue is related to a crafted XML string that can cause an application crash in QXmlStreamReader. This occurs when a prefix is greater than a length, potentially leading to a buffer overflow in memory when processing XML files. The exploitation of this issue could allow a remote attacker to cause a denial of service.
**Recommendations**
For Qt versions prior to 5.15.15, update to version 5.15.15 or later.
For Qt versions 6.x prior to 6.2.9, update to version 6.2.9 or later.
For Qt versions 6.3.x through 6.5.x prior to 6.5.2, update to version 6.5.2 or later.