Sploitus

34 exploited vulnerabilities in Qt

Vulnerabilities with publicly known exploits

Vendors
Alt Linux, Debian, Qt Company, Red Os, Almalinux, Astra Linux
With known exploits
34
Affected Qt versions
< 5.15.17, 6.2.13, 6.5.6, 6.7.1, 6.2.12, 6.5.5, 6.6.2, 4.0.0, 4.0.1, 4.1.0, 4.1.1, 4.1.2, 4.1.3, 4.1.4, 4.1.5, 4.2.0, 4.2.1, 4.2.3, 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.3.5, 4.4.0, 4.4.1, 4.4.2, 4.4.3, 4.5.0, 4.5.1, 4.5.2, 4.5.3, 4.6.0, 4.6.1, 4.6.2
Affected Ea Origin versions
= 10.5.36
Affected Qt-cute Quickteam versions
= 2.0
Affected Trolltech Qt versions
≤ 3.3.3
Affected Ggv versions
= 1.0.2
Affected Ghostview versions
= 1.3, 1.4, 1.4.1, 1.5
Affected Gv versions
= 2.7.6, 2.7b1, 2.7b2, 2.7b3, 2.7b4, 2.7b5, 2.9.4, 3.0.0, 3.0.4, 3.1.4, 3.1.6, 3.2.4, 3.4.2, 3.4.3, 3.4.12, 3.5.2, 3.5.3, 3.5.8
Affected Digia Qt versions
≤ 4.6.3

Vulnerabilities with exploits

Highest CVSS first — 6 of these already have exploit code on Sploitus

CVE-2024-36048
CVSS 10.0 CRITICAL 2024-05-18FIX AVAILABLE
CVE-2023-51714
CVSS 9.8 CRITICAL 2023-12-13FIX AVAILABLE
CVE-2020-12267
CVSS 9.8 CRITICAL 2020-04-27FIX AVAILABLE
CVE-2022-43591
CVSS 8.8 HIGH 2023-01-12
CVE-2022-40983
CVSS 8.8 HIGH 2023-01-12
CVE-2024-39936
CVSS 8.6 HIGH 2024-06-25FIX AVAILABLE
CVE-2018-21035
CVSS 8.6 HIGH 2018-09-23
CVE-2023-37369
CVSS 7.8 HIGH 2023-06-28FIX AVAILABLE
CVE-2023-32573
CVSS 7.8 HIGH 2023-05-10FIX AVAILABLE
CVE-2023-38197
CVSS 7.8 HIGH 2023-07-12FIX AVAILABLE
CVE-2023-32763
CVSS 7.8 HIGH 2023-05-22FIX AVAILABLE
CVE-2023-24607
CVSS 7.8 HIGH 2023-02-20FIX AVAILABLE
CVE-2022-25634
CVSS 7.8 HIGH 2022-03-02FIX AVAILABLE
CVE-2021-45930
CVSS 7.8 HIGH 2021-08-10FIX AVAILABLE
CVE-2020-25291
CVSS 7.8 HIGH 2020-09-13FIX AVAILABLE
CVE-2019-11354 7 exploits
CVSS 7.8 HIGH 2019-04-19
EA Origin Template Injection Remote Code ExecutiondotProject 2.1.9 - SQL Injection Vulnerability
CVE-2020-13962
CVSS 7.5 HIGH 2020-06-08
CVE-2009-1551 2 exploits
CVSS 7.5 HIGH 2009-05-06FIX AVAILABLE
Immunity Canvas: QUICKTEAM_RFIQt QuickTeam - Multiple Remote File Inclusions
CVE-2004-0691 1 exploit
CVSS 7.5 HIGH 1970-01-01FIX AVAILABLE
Qt - '.bmp' Parsing Bug Heap Overflow
CVE-2002-0970
CVSS 7.5 HIGH 2002-09-24
CVE-2002-0838 2 exploits
CVSS 7.5 HIGH 2002-09-23
GV 2.x/3.x - '.PDF'/'.PS' File Buffer Overflow (1)GV 2.x/3.x - '.PDF'/'.PS' File Buffer Overflow (2)
CVE-2021-3481
CVSS 7.1 HIGH 2021-02-11
CVE-2024-30161
CVSS 6.5 MEDIUM 2024-03-23FIX AVAILABLE
CVE-2024-25580
CVSS 6.2 MEDIUM 2024-02-08FIX AVAILABLE
CVE-2025-30348
CVSS 5.8 MEDIUM 2025-03-21FIX AVAILABLE
CVE-2023-43114
CVSS 5.5 MEDIUM 2023-09-15FIX AVAILABLE
CVE-2018-19872
CVSS 5.5 MEDIUM 2018-07-13
CVE-2016-10040
CVSS 5.5 MEDIUM 2017-03-07
CVE-2023-33285
CVSS 5.3 MEDIUM 2021-09-15FIX AVAILABLE
CVE-2023-32762
CVSS 5.3 MEDIUM 2023-05-08FIX AVAILABLE
CVE-2023-34410
CVSS 5.3 MEDIUM 2023-06-04FIX AVAILABLE
CVE-2010-2621 1 exploit
CVSS 5.0 MEDIUM 2010-07-02FIX AVAILABLE
Qt 4.6.3 - 'QSslSocketBackendPrivate::transmit()' Denial of Service
CVE-2010-5076
CVSS 4.3 MEDIUM 2012-06-19FIX AVAILABLE
CVE-2012-4929 3 exploits
CVSS 2.6 LOW 1999-01-01FIX AVAILABLE
sslpwnSitadel - Web Application Security Scanner