Every CVE Search/ Get API key

CVE-2015-9541

Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that...

7.5 HighFix available

Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

2.59%Up 1.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564.

Record
CVE-2015-9541
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-776
Updated
2026-11-02
CVE List No score

Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564.

Record
CVE-2015-9541
Updated
2026-11-02
EUVDEUVD-2015-9381 No score

Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564.

Record
EUVD-2015-9381
Updated
2026-11-03
GitHub AdvisoriesGHSA-h29v-8cc2-w88r 7.5

Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that...

Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564.

Record
GHSA-h29v-8cc2-w88r
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-776
Updated
2026-11-02
OSVAZL-6832 7.5

CVE-2015-9541 affecting package qt5-qtsvg for versions less than 5.12.11-3

Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564.

Record
AZL-6832
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 7.5

Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564.

Record
CVE-2015-9541
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 6 moreShow less
OSVDEBIAN-CVE-2015-9541 7.5

Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564.

Record
DEBIAN-CVE-2015-9541
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2020:4690 7.5

Red Hat Security Advisory: qt5-qtbase and qt5-qtwebsockets security and bug fix update

Record
RHSA-2020:4690
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2020:4690 7.5

Moderate: qt5-qtbase and qt5-qtwebsockets security and bug fix update

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt.

Security Fix(es):

  • qt: XML entity expansion vulnerability (CVE-2015-9541)

  • qt5-qtwebsockets: websocket implementation allows only limited size for frames and messages therefore attacker can cause DOS (CVE-2018-21035)

  • qt: files placed by attacker can influence the working directory and lead to malicious code execution (CVE-2020-0569)

  • qt: files placed by attacker can influence the working directory and lead to malicious code execution (CVE-2020-0570)

  • qt5: incorrectly calls SSL_shutdown() in OpenSSL mid-handshake causing denial of service in TLS applications (CVE-2020-13962)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.

Record
RLSA-2020:4690
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2015-9541 7.5

Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564.

Record
UBUNTU-CVE-2015-9541
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2020:4690 No score

Moderate: qt5-qtbase and qt5-qtwebsockets security and bug fix update

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt.

Security Fix(es):

  • qt: XML entity expansion vulnerability (CVE-2015-9541)

  • qt5-qtwebsockets: websocket implementation allows only limited size for frames and messages therefore attacker can cause DOS (CVE-2018-21035)

  • qt: files placed by attacker can influence the working directory and lead to malicious code execution (CVE-2020-0569)

  • qt: files placed by attacker can influence the working directory and lead to malicious code execution (CVE-2020-0570)

  • qt5: incorrectly calls SSL_shutdown() in OpenSSL mid-handshake causing denial of service in TLS applications (CVE-2020-13962)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2020:4690
Updated
2026-11-02
OSVMGASA-2020-0192 No score

Updated qtbase5 packages fix security vulnerability

Updated qtbase5 packages fix security vulnerability:

An XML Entity Expansion flaw was found in the QT library. Applications that use QT to load untrusted images, for example, SVG images, or untrusted XML documents, may be vulnerable to this flaw. This flaw allows an attacker to cause a denial of service (CVE-2015-9541).

Record
MGASA-2020-0192
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
qt5-qtbase-static
AlmaLinux:8
From an advisory covering 5 CVEs
 before 5.12.5-6.el8
5.12.5-6.el8
qt5-qttools-static
AlmaLinux:8
From an advisory covering 5 CVEs
 before 5.12.5-2.el8
5.12.5-2.el8
qt5-qtsvg
Azure Linux:2
 before 5.12.11-3
5.12.11-3
qtbase-opensource-src
Debian:12
 before 5.12.5+dfsg-9
5.12.5+dfsg-9
qtbase-opensource-src
Debian:13
 before 5.12.5+dfsg-9
5.12.5+dfsg-9
qtbase-opensource-src
Debian:14
 before 5.12.5+dfsg-9
5.12.5+dfsg-9
qtbase5
Mageia:7
 before 5.12.6-3.mga7
5.12.6-3.mga7
qt5-assistant
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-assistant-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-designer
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
Show 88 moreShow less
Affected packages
PackageAffectedFixed
qt5-designer-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-doctools
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-doctools-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-linguist
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-linguist-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qdbusviewer
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qdbusviewer-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qtbase
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-examples
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-examples-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-gui
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-gui-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-mysql
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-mysql-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-odbc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-odbc-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-postgresql
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-postgresql-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-private-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-tests-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qttools
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qttools-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qttools-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qttools-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qttools-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qttools-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qttools-examples
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qttools-examples-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qttools-libs-designer
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qttools-libs-designer-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qttools-libs-designercomponents
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qttools-libs-designercomponents-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qttools-libs-help
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qttools-libs-help-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qttools-tests-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qtwebsockets
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qtwebsockets-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qtwebsockets-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qtwebsockets-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qtwebsockets-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qtwebsockets-examples
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qtwebsockets-examples-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qtwebsockets-tests-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-assistant-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-designer-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-doctools-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-linguist-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qdbusviewer-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qtbase-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-debugsource
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-devel-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-examples-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-gui-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-mysql-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-odbc-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-postgresql-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-static
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qtbase-tests-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:5.12.5-6.el8
0:5.12.5-6.el8
qt5-qttools-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qttools-debugsource
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qttools-devel-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qttools-examples-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qttools-libs-designer-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qttools-libs-designercomponents-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qttools-libs-help-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qttools-static
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qttools-tests-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
qt5-qtwebsockets
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:5.12.5-2.el8
0:5.12.5-2.el8
pyside
Ubuntu:14.04:LTS
 All versions, plus listed versions
1.1.2-41.2.1-11.2.1-1build11.2.1-21.2.1-41.2.1-4build1
 None known
qt4-x11
Ubuntu:14.04:LTS
 All versions, plus listed versions
4:4.8.4+dfsg-0ubuntu184:4.8.4+dfsg-0ubuntu194:4.8.4+dfsg-0ubuntu204:4.8.4+dfsg-0ubuntu214:4.8.4+dfsg-0ubuntu224:4.8.5+git192-g085f851+dfsg-2ubuntu34:4.8.5+git192-g085f851+dfsg-2ubuntu44:4.8.5+git192-g085f851+dfsg-2ubuntu4.1
 None known
qt4-x11
Ubuntu:16.04:LTS
 All versions, plus listed versions
4:4.8.6+git64-g5dc8b2b+dfsg-3~ubuntu84:4.8.7+dfsg-5ubuntu14:4.8.7+dfsg-5ubuntu2
 None known
qtbase-opensource-src
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
5.4.2+dfsg-2ubuntu95.5.1+dfsg-6ubuntu45.5.1+dfsg-10ubuntu25.5.1+dfsg-13ubuntu15.5.1+dfsg-13ubuntu2
Show 15 moreShow less
5.5.1+dfsg-13ubuntu35.5.1+dfsg-14ubuntu15.5.1+dfsg-14ubuntu25.5.1+dfsg-14ubuntu35.5.1+dfsg-15ubuntu15.5.1+dfsg-16ubuntu15.5.1+dfsg-16ubuntu65.5.1+dfsg-16ubuntu75.5.1+dfsg-16ubuntu7.15.5.1+dfsg-16ubuntu7.25.5.1+dfsg-16ubuntu7.55.5.1+dfsg-16ubuntu7.65.5.1+dfsg-16ubuntu7.75.5.1+dfsg-16ubuntu7.7+esm15.5.1+dfsg-16ubuntu7.7+esm2
 None known
phantomjs
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.9.0-12.0.0+dfsg-12.1.1+dfsg-1
 None known
pyside
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.2.2-21.2.2-2build11.2.2-2build2
 None known
qtbase-opensource-src
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.9.1+dfsg-10ubuntu15.9.1+dfsg-10ubuntu25.9.2+dfsg-4ubuntu65.9.3+dfsg-0ubuntu15.9.3+dfsg-0ubuntu3
Show 12 moreShow less
5.9.3+dfsg-0ubuntu45.9.4+dfsg-0ubuntu35.9.4+dfsg-0ubuntu45.9.5+dfsg-0ubuntu15.9.5+dfsg-0ubuntu25.9.5+dfsg-0ubuntu2.15.9.5+dfsg-0ubuntu2.35.9.5+dfsg-0ubuntu2.45.9.5+dfsg-0ubuntu2.55.9.5+dfsg-0ubuntu2.65.9.5+dfsg-0ubuntu2.6+esm15.9.5+dfsg-0ubuntu2.6+esm2
 None known
phantomjs
Ubuntu:18.04:LTS
 All versions, plus listed versions
2.1.1+dfsg-2
 None known
pyside
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.2.2+source1-1build11.2.2+source1-21.2.2+source1-3
 None known
qt4-x11
Ubuntu:18.04:LTS
 All versions, plus listed versions
4:4.8.7+dfsg-7ubuntu1
 None known
phantomjs
Ubuntu:20.04:LTS
 All versions, plus listed versions
2.1.1+dfsg-22.1.1+dfsg-2ubuntu1
 None known
pyside2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.2-3build25.11.2-3ubuntu15.11.2-3ubuntu25.13.2-2.25.14.0-1~exp1ubuntu25.14.0-1~exp1ubuntu35.14.0-1~exp1ubuntu45.14.0-1~exp1ubuntu5
 None known
pyside2
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.2-15.15.2-25.15.2-2build15.15.2-2build2
 None known
pyside2
Ubuntu:24.04:LTS
 All versions, plus listed versions
5.15.10-45.15.11-15.15.12-65.15.12-6.1build15.15.12-6.1build25.15.12-6.1build35.15.13-1
 None known
pyside2
Ubuntu:25.10
 All versions, plus listed versions
5.15.16-3.1build15.15.16-3.1build25.15.16-3.1build35.15.16-4
 None known

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-9541 is a high vulnerability (CVSS 7.5) in Qt, published January 24, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.59%, the 85th percentile. Fixed in qt5-qtsvg 5.12.11-3.

References

Show 36 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open