CVE-2023-43114
An issue was discovered in Qt before 5.15.16, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3 on Windows. When using the GDI font engine, if a corrupted font is loaded via QFontDatabase::addApplicationFont{FromData], then it can cause the application to crash because of missing length checks.
- Affected products
- Qt
- Qt
- < 5.15.16, 6.2.10, 6.5.3
- Fix
- Available
- CVSS 3.1
- 5.5 MEDIUM
- EPSS
- 0.2% (16th percentile)
- NVD status
- Modified
- Published
- 2023-09-18
CVE-2023-43114 at NVD
No indexed exploits for CVE-2023-43114 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2023-43114 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.