AZL-6837
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-6837.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-6837
- Upstream
- Published
- 2021-08-09T22:15:08Z
- Modified
- 2026-04-01T05:21:24.533591Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- CVE-2020-24742 affecting package qt5-qtsvg for versions less than 5.12.11-3
- Details
-
An issue has been fixed in Qt versions 5.14.0 where QPluginLoader attempts to load plugins relative to the working directory, allowing attackers to execute arbitrary code via crafted files.
- References