Every CVE Search/ Get API key

CVE-2023-32762

An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6...

5.3 MediumFix available

An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly prohibited by the server. This happens if the case used for this header does not exactly match.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
None

Exploit likelihood

0.88%Up 0.8 points since May 29, 2023
90%50%10%1%

What each source reports

NVD Score used 5.3

An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly prohibited by the server. This happens if the case used for this header does not exactly match.

Record
CVE-2023-32762
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
CVE List 5.3

An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly prohibited by the server. This happens if the case used for this header does not exactly match.

Record
CVE-2023-32762
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
EUVDEUVD-2023-36986 5.3

An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly prohibited by the server. This happens if the case used for this header does not exactly match.

Record
EUVD-2023-36986
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-j8jh-fhfw-jx2c 5.3

An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6...

An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly prohibited by the server. This happens if the case used for this header does not exactly match.

Record
GHSA-j8jh-fhfw-jx2c
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVALPINE-CVE-2023-32762 5.3

An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly prohibited by the server. This happens if the case used for this header does not exactly match.

Record
ALPINE-CVE-2023-32762
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-03
OSVAZL-26944 5.3

CVE-2023-32762 affecting package qt5-qtbase for versions less than 5.12.11-8

An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly prohibited by the server. This happens if the case used for this header does not exactly match.

Record
AZL-26944
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
Show 14 moreShow less
OSV 5.3

An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly prohibited by the server. This happens if the case used for this header does not exactly match.

Record
CVE-2023-32762
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2023-32762 5.3

An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly prohibited by the server. This happens if the case used for this header does not exactly match.

Record
DEBIAN-CVE-2023-32762
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVOESA-2023-1387 7.5

qt5-qtbase security update

Qt is a software toolkit for developing applications.

Security Fix(es):

An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly prohibited by the server. This happens if the case used for this header does not exactly match.(CVE-2023-32762)

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. When a SVG file with an image inside it is rendered, a QTextLayout buffer overflow can be triggered.(CVE-2023-32763)

Record
OESA-2023-1387
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1489 7.5

qt5-qtbase security update

Qt is a software toolkit for developing applications.

Security Fix(es):

Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3.(CVE-2023-24607)

An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly prohibited by the server. This happens if the case used for this header does not exactly match.(CVE-2023-32762)

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. When a SVG file with an image inside it is rendered, a QTextLayout buffer overflow can be triggered.(CVE-2023-32763)

Record
OESA-2023-1489
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-32762 5.3

An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly prohibited by the server. This happens if the case used for this header does not exactly match.

Record
UBUNTU-CVE-2023-32762
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVMGASA-2023-0190 No score

Updated qtbase5 packages fix security vulnerability

Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly prohibited by the server. This happens if the case used for this header does not exactly match. (CVE-2023-32762) QTextLayout buffer overflow in SVG file rendering. (CVE-2023-32763)

Record
MGASA-2023-0190
Updated
2026-11-02
OSVopenSUSE-SU-2024:12955-1 No score

libQt5Bootstrap-devel-static-32bit-5.15.9+kde154-1.1 on GA media

These are all security issues fixed in the libQt5Bootstrap-devel-static-32bit-5.15.9+kde154-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12955-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13289-1 No score

libQt6Concurrent6-6.5.3-2.1 on GA media

These are all security issues fixed in the libQt6Concurrent6-6.5.3-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13289-1
Updated
2026-11-02
OSVSUSE-SU-2023:2982-1 No score

Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues:

  • CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS (bsc#1209616).
  • CVE-2023-32762: Fixed Qt Network incorrectly parses the strict-transport-security (HSTS) header (bsc#1211797).
  • CVE-2023-32763: Fixed buffer overflow when rendering an SVG file with an image inside it (bsc#1211798).
  • CVE-2023-33285: Fixed buffer overflow in QDnsLookup (bsc#1211642).
  • CVE-2023-34410: Fixed certificate validation does not always consider whether the root of a chain is a configured CA certificate (bsc#1211994).
  • CVE-2023-38197: Fixed infinite loops in QXmlStreamReader(bsc#1213326).
Record
SUSE-SU-2023:2982-1
Updated
2026-11-02
OSVSUSE-SU-2023:3018-1 No score

Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues:

  • CVE-2023-34410: Fixed certificate validation does not always consider whether the root of a chain is a configured CA certificate (bsc#1211994).
  • CVE-2023-33285: Fixed buffer overflow in QDnsLookup (bsc#1211642).
  • CVE-2023-32762: Fixed Qt Network incorrectly parses the strict-transport-security (HSTS) header (bsc#1211797).
  • CVE-2023-38197: Fixed infinite loops in QXmlStreamReader(bsc#1213326).
  • CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS (bsc#1209616).
Record
SUSE-SU-2023:3018-1
Updated
2026-11-02
OSVSUSE-SU-2023:3207-1 No score

Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues:

  • CVE-2023-34410: Fixed certificate validation does not always consider whether the root of a chain is a configured CA certificate (bsc#1211994).
  • CVE-2023-33285: Fixed buffer overflow in QDnsLookup (bsc#1211642).
  • CVE-2023-32762: Fixed Qt Network incorrectly parses the strict-transport-security (HSTS) header (bsc#1211797).
  • CVE-2023-38197: Fixed infinite loops in QXmlStreamReader(bsc#1213326).
  • CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS (bsc#1209616).
Record
SUSE-SU-2023:3207-1
Updated
2026-11-02
OSVSUSE-SU-2023:3225-1 No score

Security update for qt6-base

This update for qt6-base fixes the following issues:

  • CVE-2023-34410: Fixed certificate validation does not always consider whether the root of a chain is a configured CA certificate (bsc#1211994).
  • CVE-2023-33285: Fixed buffer overflow in QDnsLookup (bsc#1211642).
  • CVE-2023-32762: Fixed Qt Network incorrectly parses the strict-transport-security (HSTS) header (bsc#1211797).
  • CVE-2023-38197: Fixed infinite loops in QXmlStreamReader(bsc#1213326).
  • CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS (bsc#1209616).
Record
SUSE-SU-2023:3225-1
Updated
2026-11-02
OSVSUSE-SU-2023:3380-1 No score

Security update for qt6-base

This update for qt6-base fixes the following issues:

  • CVE-2023-34410: Fixed certificate validation flaw (bsc#1211994).
  • CVE-2023-33285: Fixed buffer overflow in QDnsLookup (bsc#1211642).
  • CVE-2023-32762: Fixed strict-transport-security (HSTS) header parsing error (QTBUG-113392) (bsc#1211797).
  • CVE-2023-38197: Fixed infinite loops in QXmlStreamReader (QTBUG-92113, QTBUG-95188) (bsc#1213326).
  • CVE-2023-32763: Fixed buffer overflow in QTextLayout (QTBUG-113337, QTBUG-106947, QTBUG-89557, QTBUG-104986) (bsc#1211798).
Record
SUSE-SU-2023:3380-1
Updated
2026-11-02
OSVUSN-7780-1 No score

qtbase-opensource-src vulnerabilities

It was discovered that Qt did not correctly handle certain inputs when using the SQL ODBC driver plugin. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-24607)

It was discovered that Qt did not correctly parse certain strict-transport- security headers. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-32762)

It was discovered that Qt did not correctly handle certain inputs from DNS servers. A remote attacker could possibly use this issue to execute arbitrary code or cause a denial of service. (CVE-2023-33285)

It was discovered that Qt did not correctly validate certain CA certificates for TLS. An attacker could possibly use this issue to gain access to unauthorized resources. (CVE-2023-34410)

Record
USN-7780-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
qt5-qtbase
Alpine:v3.18
 before 5.15.9_git20230505-r0
5.15.9_git20230505-r0
qt5-qtbase
Alpine:v3.19
 before 5.15.9_git20230505-r0
5.15.9_git20230505-r0
qt5-qtbase
Alpine:v3.20
 before 5.15.9_git20230505-r0
5.15.9_git20230505-r0
qt5-qtbase
Alpine:v3.21
 before 5.15.9_git20230505-r0
5.15.9_git20230505-r0
qt5-qtbase
Alpine:v3.22
 before 5.15.9_git20230505-r0
5.15.9_git20230505-r0
qt5-qtbase
Alpine:v3.23
 before 5.15.9_git20230505-r0
5.15.9_git20230505-r0
qt5-qtbase
Alpine:v3.24
 before 5.15.9_git20230505-r0
5.15.9_git20230505-r0
qt6-qtbase
Alpine:v3.18
 before 6.5.0-r5
6.5.0-r5
qt6-qtbase
Alpine:v3.19
 before 6.5.0-r5
6.5.0-r5
qt6-qtbase
Alpine:v3.20
 before 6.5.0-r5
6.5.0-r5
Show 63 moreShow less
Affected packages
PackageAffectedFixed
qt6-qtbase
Alpine:v3.21
 before 6.5.0-r5
6.5.0-r5
qt6-qtbase
Alpine:v3.22
 before 6.5.0-r5
6.5.0-r5
qt6-qtbase
Alpine:v3.23
 before 6.5.0-r5
6.5.0-r5
qt6-qtbase
Alpine:v3.24
 before 6.5.0-r5
6.5.0-r5
qt5-qtbase
Azure Linux:2
 before 5.12.11-8
5.12.11-8
qt6-base
Debian:12
 before 6.4.2+dfsg-9
6.4.2+dfsg-9
qt6-base
Debian:13
 before 6.4.2+dfsg-9
6.4.2+dfsg-9
qt6-base
Debian:14
 before 6.4.2+dfsg-9
6.4.2+dfsg-9
qtbase-opensource-src
Debian:12
 before 5.15.8+dfsg-10
5.15.8+dfsg-10
qtbase-opensource-src
Debian:13
 before 5.15.8+dfsg-10
5.15.8+dfsg-10
qtbase-opensource-src
Debian:14
 before 5.15.8+dfsg-10
5.15.8+dfsg-10
qtbase-opensource-src
Debian:10
From an advisory covering 7 CVEs
 before 5.11.3+dfsg1-1+deb10u6, plus listed versions
5.11.3+dfsg1-15.11.3+dfsg1-1+deb10u15.11.3+dfsg1-1+deb10u25.11.3+dfsg1-1+deb10u35.11.3+dfsg1-1+deb10u45.11.3+dfsg1-1+deb10u5
5.11.3+dfsg1-1+deb10u6
qtbase5
Mageia:8
From an advisory covering 2 CVEs
 before 5.15.2-4.9.mga8
5.15.2-4.9.mga8
qt5-qtbase
openEuler:20.03-LTS-SP1
From an advisory covering 2 CVEs
 before 5.11.1-15.oe1
5.11.1-15.oe1
qt5-qtbase
openEuler:20.03-LTS-SP3
From an advisory covering 2 CVEs
 before 5.11.1-15.oe1
5.11.1-15.oe1
qt5-qtbase
openEuler:22.03-LTS
From an advisory covering 2 CVEs
 before 5.15.2-7.oe2203sp1
5.15.2-7.oe2203sp1
qt5-qtbase
openEuler:22.03-LTS-SP1
From an advisory covering 2 CVEs
 before 5.15.2-7.oe2203sp1
5.15.2-7.oe2203sp1
qt5-qtbase
openEuler:22.03-LTS-SP2
From an advisory covering 3 CVEs
 before 5.15.2-7.oe2203sp2
5.15.2-7.oe2203sp2
libqt5-qtbase
SUSE:Linux Enterprise Module for Basesystem 15 SP4
From an advisory covering 6 CVEs
 before 5.15.2+kde294-150400.6.6.1
5.15.2+kde294-150400.6.6.1
libqt5-qtbase
SUSE:Linux Enterprise Module for Desktop Applications 15 SP4
From an advisory covering 6 CVEs
 before 5.15.2+kde294-150400.6.6.1
5.15.2+kde294-150400.6.6.1
libqt5-qtbase
openSUSE:Leap 15.4
From an advisory covering 6 CVEs
 before 5.15.2+kde294-150400.6.6.1
5.15.2+kde294-150400.6.6.1
libqt5-qtbase
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 5 CVEs
 before 5.15.8+kde185-150500.4.8.1
5.15.8+kde185-150500.4.8.1
libqt5-qtbase
SUSE:Linux Enterprise Module for Desktop Applications 15 SP5
From an advisory covering 5 CVEs
 before 5.15.8+kde185-150500.4.8.1
5.15.8+kde185-150500.4.8.1
libqt5-qtbase
openSUSE:Leap 15.5
From an advisory covering 5 CVEs
 before 5.15.8+kde185-150500.4.8.1
5.15.8+kde185-150500.4.8.1
libqt5-qtbase
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 5 CVEs
 before 5.12.7-150200.4.23.1
5.12.7-150200.4.23.1
libqt5-qtbase
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
From an advisory covering 5 CVEs
 before 5.12.7-150200.4.23.1
5.12.7-150200.4.23.1
libqt5-qtbase
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 5 CVEs
 before 5.12.7-150200.4.23.1
5.12.7-150200.4.23.1
libqt5-qtbase
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 5 CVEs
 before 5.12.7-150200.4.23.1
5.12.7-150200.4.23.1
libqt5-qtbase
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 5 CVEs
 before 5.12.7-150200.4.23.1
5.12.7-150200.4.23.1
libqt5-qtbase
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 5 CVEs
 before 5.12.7-150200.4.23.1
5.12.7-150200.4.23.1
libqt5-qtbase
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 5 CVEs
 before 5.12.7-150200.4.23.1
5.12.7-150200.4.23.1
libqt5-qtbase
SUSE:Manager Proxy 4.2
From an advisory covering 5 CVEs
 before 5.12.7-150200.4.23.1
5.12.7-150200.4.23.1
libqt5-qtbase
SUSE:Manager Server 4.2
From an advisory covering 5 CVEs
 before 5.12.7-150200.4.23.1
5.12.7-150200.4.23.1
libqt5-qtbase
SUSE:Enterprise Storage 7
From an advisory covering 5 CVEs
 before 5.12.7-150200.4.23.1
5.12.7-150200.4.23.1
libqt5-qtbase
SUSE:Enterprise Storage 7.1
From an advisory covering 5 CVEs
 before 5.12.7-150200.4.23.1
5.12.7-150200.4.23.1
qt6-base
SUSE:Linux Enterprise Module for Desktop Applications 15 SP5
From an advisory covering 5 CVEs
 before 6.4.2-150500.3.7.4
6.4.2-150500.3.7.4
qt6-base
SUSE:Linux Enterprise Module for Package Hub 15 SP5
From an advisory covering 5 CVEs
 before 6.4.2-150500.3.7.4
6.4.2-150500.3.7.4
qt6-base
openSUSE:Leap 15.5
From an advisory covering 5 CVEs
 before 6.4.2-150500.3.7.4
6.4.2-150500.3.7.4
qt6-base-docs
openSUSE:Leap 15.5
From an advisory covering 5 CVEs
 before 6.4.2-150500.3.7.1
6.4.2-150500.3.7.1
qt6-base
SUSE:Linux Enterprise Module for Package Hub 15 SP4
From an advisory covering 5 CVEs
 before 6.2.2-150400.4.6.1
6.2.2-150400.4.6.1
qt6-base
openSUSE:Leap 15.4
From an advisory covering 5 CVEs
 before 6.2.2-150400.4.6.1
6.2.2-150400.4.6.1
qt6-base-docs
openSUSE:Leap 15.4
From an advisory covering 5 CVEs
 before 6.2.2-150400.4.6.1
6.2.2-150400.4.6.1
qtbase-opensource-src-gles
Ubuntu:16.04:LTS
 All versions, plus listed versions
5.4.2+dfsg-2ubuntu95.5.1+dfsg-6ubuntu15.5.1+dfsg-10ubuntu15.5.1+dfsg-13ubuntu15.5.1+dfsg-13ubuntu2
Show 9 moreShow less
5.5.1+dfsg-13ubuntu35.5.1+dfsg-14ubuntu15.5.1+dfsg-14ubuntu25.5.1+dfsg-14ubuntu35.5.1+dfsg-15ubuntu15.5.1+dfsg-16ubuntu15.5.1+dfsg-16ubuntu45.5.1+dfsg-16ubuntu55.5.1+dfsg-16ubuntu6
 None known
qtbase-opensource-src
Ubuntu:Pro:18.04:LTS
 before 5.9.5+dfsg-0ubuntu2.6+esm1, plus listed versions
5.9.1+dfsg-10ubuntu15.9.1+dfsg-10ubuntu25.9.2+dfsg-4ubuntu65.9.3+dfsg-0ubuntu15.9.3+dfsg-0ubuntu3
Show 10 moreShow less
5.9.3+dfsg-0ubuntu45.9.4+dfsg-0ubuntu35.9.4+dfsg-0ubuntu45.9.5+dfsg-0ubuntu15.9.5+dfsg-0ubuntu25.9.5+dfsg-0ubuntu2.15.9.5+dfsg-0ubuntu2.35.9.5+dfsg-0ubuntu2.45.9.5+dfsg-0ubuntu2.55.9.5+dfsg-0ubuntu2.6
5.9.5+dfsg-0ubuntu2.6+esm1
qtbase-opensource-src
Ubuntu:Pro:20.04:LTS
 before 5.12.8+dfsg-0ubuntu2.1+esm1, plus listed versions
5.12.4+dfsg-4ubuntu15.12.5+dfsg-25.12.5+dfsg-85.12.5+dfsg-8build15.12.5+dfsg-9build15.12.8+dfsg-0ubuntu15.12.8+dfsg-0ubuntu2.1
5.12.8+dfsg-0ubuntu2.1+esm1
qtbase-opensource-src-gles
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.12.4+dfsg-1build15.12.5+dfsg-15.12.5+dfsg-25.12.8+dfsg-0ubuntu1
 None known
qt6-base
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.2+dfsg-5ubuntu16.2.2+dfsg-6ubuntu16.2.2+dfsg-6ubuntu26.2.4+dfsg-1ubuntu16.2.4+dfsg-2ubuntu16.2.4+dfsg-2ubuntu1.1
 None known
qtbase-opensource-src-gles
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.2+dfsg-45.15.2+dfsg-55.15.3+dfsg-1
 None known
qtbase-opensource-src
Ubuntu:Pro:22.04:LTS
 before 5.15.3+dfsg-2ubuntu0.2+esm1, plus listed versions
5.15.2+dfsg-125.15.2+dfsg-135.15.2+dfsg-145.15.2+dfsg-14ubuntu15.15.2+dfsg-14ubuntu3
Show 5 moreShow less
5.15.2+dfsg-155.15.3+dfsg-15.15.3+dfsg-25.15.3+dfsg-2ubuntu0.15.15.3+dfsg-2ubuntu0.2
5.15.3+dfsg-2ubuntu0.2+esm1
qt6-base
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.4.2+dfsg-186.4.2+dfsg-196.4.2+dfsg-19build16.4.2+dfsg-206.4.2+dfsg-216.4.2+dfsg-21.1build46.4.2+dfsg-21.1build5
 None known
qtbase-opensource-src-gles
Ubuntu:24.04:LTS
 All versions, plus listed versions
5.15.10+dfsg-25.15.10+dfsg-35.15.12+dfsg-15.15.12+dfsg-1ubuntu15.15.12+dfsg-1ubuntu25.15.13+dfsg-1
 None known
qt6-base
Ubuntu:25.10
 All versions, plus listed versions
6.8.3+dfsg-0ubuntu26.8.3+dfsg-0ubuntu36.9.2+dfsg-1ubuntu1
 None known
qtbase-opensource-src-gles
Ubuntu:25.10
 All versions, plus listed versions
5.15.15+dfsg-25.15.17+dfsg-1
 None known
qt6-base
Ubuntu:26.10
 All versions, plus listed versions
6.10.2+dfsg-76.10.2+dfsg-14ubuntu26.10.2+dfsg-156.10.2+dfsg-166.11.2+dfsg-4ubuntu2
 None known
qtbase-opensource-src-gles
Ubuntu:26.10
 All versions, plus listed versions
5.15.18+dfsg-15.15.19+dfsg-2
 None known
qt6-base
Ubuntu:26.04:LTS
 All versions, plus listed versions
6.9.2+dfsg-1ubuntu16.9.2+dfsg-26.9.2+dfsg-3ubuntu16.9.2+dfsg-3ubuntu26.9.2+dfsg-46.10.2+dfsg-36.10.2+dfsg-66.10.2+dfsg-7
 None known
qtbase-opensource-src-gles
Ubuntu:26.04:LTS
 All versions, plus listed versions
5.15.17+dfsg-15.15.17+dfsg-25.15.18+dfsg-1
 None known
qtbase-opensource-src
Ubuntu:Pro:16.04:LTS
From an advisory covering 4 CVEs
 before 5.5.1+dfsg-16ubuntu7.7+esm1, plus listed versions
5.4.2+dfsg-2ubuntu95.5.1+dfsg-6ubuntu45.5.1+dfsg-10ubuntu25.5.1+dfsg-13ubuntu15.5.1+dfsg-13ubuntu2
Show 13 moreShow less
5.5.1+dfsg-13ubuntu35.5.1+dfsg-14ubuntu15.5.1+dfsg-14ubuntu25.5.1+dfsg-14ubuntu35.5.1+dfsg-15ubuntu15.5.1+dfsg-16ubuntu15.5.1+dfsg-16ubuntu65.5.1+dfsg-16ubuntu75.5.1+dfsg-16ubuntu7.15.5.1+dfsg-16ubuntu7.25.5.1+dfsg-16ubuntu7.55.5.1+dfsg-16ubuntu7.65.5.1+dfsg-16ubuntu7.7
5.5.1+dfsg-16ubuntu7.7+esm1
qtbase-opensource-src
Ubuntu:Pro:18.04:LTS
From an advisory covering 4 CVEs
 before 5.9.5+dfsg-0ubuntu2.6+esm1, plus listed versions
5.9.1+dfsg-10ubuntu15.9.1+dfsg-10ubuntu25.9.2+dfsg-4ubuntu65.9.3+dfsg-0ubuntu15.9.3+dfsg-0ubuntu3
Show 10 moreShow less
5.9.3+dfsg-0ubuntu45.9.4+dfsg-0ubuntu35.9.4+dfsg-0ubuntu45.9.5+dfsg-0ubuntu15.9.5+dfsg-0ubuntu25.9.5+dfsg-0ubuntu2.15.9.5+dfsg-0ubuntu2.35.9.5+dfsg-0ubuntu2.45.9.5+dfsg-0ubuntu2.55.9.5+dfsg-0ubuntu2.6
5.9.5+dfsg-0ubuntu2.6+esm1
qtbase-opensource-src
Ubuntu:Pro:20.04:LTS
From an advisory covering 4 CVEs
 before 5.12.8+dfsg-0ubuntu2.1+esm1, plus listed versions
5.12.4+dfsg-4ubuntu15.12.5+dfsg-25.12.5+dfsg-85.12.5+dfsg-8build15.12.5+dfsg-9build15.12.8+dfsg-0ubuntu15.12.8+dfsg-0ubuntu2.1
5.12.8+dfsg-0ubuntu2.1+esm1
qtbase-opensource-src
Ubuntu:Pro:22.04:LTS
From an advisory covering 4 CVEs
 before 5.15.3+dfsg-2ubuntu0.2+esm1, plus listed versions
5.15.2+dfsg-125.15.2+dfsg-135.15.2+dfsg-145.15.2+dfsg-14ubuntu15.15.2+dfsg-14ubuntu3
Show 5 moreShow less
5.15.2+dfsg-155.15.3+dfsg-15.15.3+dfsg-25.15.3+dfsg-2ubuntu0.15.15.3+dfsg-2ubuntu0.2
5.15.3+dfsg-2ubuntu0.2+esm1
libqt5-qtbase
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 5.15.9+kde154-1.1
5.15.9+kde154-1.1
qt6-base
openSUSE:Tumbleweed
 before 6.5.3-2.1
6.5.3-2.1

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-32762 is a medium vulnerability (CVSS 5.3) in Qt, published May 28, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.88%, the 59th percentile. Fixed in qt5-qtbase 5.15.9_git20230505-r0.

References

Show 34 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open