CVE-2020-24742

An issue has been fixed in Qt versions 5.14.0 where QPluginLoader attempts to load plugins relative to the working directory, allowing attackers to execute arbitrary code via crafted files.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*

History

21 Nov 2024, 05:16

Type Values Removed Values Added
References () https://codereview.qt-project.org/c/qt/qtbase/+/280730 - Patch, Vendor Advisory () https://codereview.qt-project.org/c/qt/qtbase/+/280730 - Patch, Vendor Advisory

Information

Published : 2021-08-09 22:15

Updated : 2024-11-21 05:16


NVD link : CVE-2020-24742

Mitre link : CVE-2020-24742

CVE.ORG link : CVE-2020-24742


JSON object : View

Products Affected

qt

  • qt