PatchTheCVEdigia vulnerabilities
Recent CVEs affecting digia products. 6 tracked.
digia has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2015-05-12. Highest priority: CVE-2015-1860 (score 48/100).
- CVE-2015-1860 MEDIUM 6.8 MITIGATE UPGRADE Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before
- CVE-2015-1859 MEDIUM 6.8 MITIGATE UPGRADE Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7
- CVE-2015-1858 MEDIUM 6.8 UPGRADE DOWNGRADE Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before
- CVE-2015-0295 MEDIUM 5.0 MITIGATE MITIGATE The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color comp
- CVE-2013-4549 MEDIUM 5.0 UPGRADE DOWNGRADE QXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to cause a denial of service (memory cons
- CVE-2012-5624 MEDIUM 4.3 UPGRADE DOWNGRADE The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-
FAQ
How do I fix digia vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is digia being exploited right now?
None of the tracked digia CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which digia CVE should I patch first?
CVE-2015-1860 currently ranks highest (48/100): Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before .