HomeDefectsLIN1023-2447
Fixed

LIN1023-2447 : Security Advisory - qtbase - CVE-2023-45872

Created: Oct 20, 2023    Updated: Aug 13, 2024
Resolved Date: Aug 13, 2024
Found In Version: 10.23.30.1
Fix Version: 10.23.30.11
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Userspace

Description

When an invalid source is used to indicate an image to be loaded is specified then it will end up trying to load it as a SVG file which will trigger a crash in Qt SVG. This does not affect Qt 5.15.x or Qt 6.5.3

https://www.qt.io/blog/security-advisory-loading-invalid-qml-image-source-impacts-qt

CREATE(Triage):(User=admin) CVE-2023-45872 (https://nvd.nist.gov/vuln/detail/CVE-2023-45872)

CVEs