PT-2024-13315
CVE-2023-45935
·
Published
2024-01-26
·
Updated
2024-12-20
Description by
CVSS 3.1
6.2
MediumMetricsAV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Qt versions 6 through 6.6
Description
A NULL pointer dereference was discovered via the function
QXcbConnection::initializeAllAtoms(). This issue is disputed because it is not expected that an X application should continue to run when there is arbitrary anomalous behavior from the X server.Recommendations
For Qt versions 6 through 6.6, consider disabling the
QXcbConnection::initializeAllAtoms() function as a temporary workaround until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability. Found an issue in the description? Have something to add? Feel free to write us 👾