Every CVE Search/ Get API key

OSV-2020-902

Index-out-of-bounds in QUnicodeTables::qGetProp

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24266

Crash type: Index-out-of-bounds
Crash state: 
QUnicodeTables::qGetProp
QString QUnicodeTables::convertCase<QString>
QString::toLower_helper

What each source reports

OSV No score

Index-out-of-bounds in QUnicodeTables::qGetProp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24266

Crash type: Index-out-of-bounds
Crash state: 
QUnicodeTables::qGetProp
QString QUnicodeTables::convertCase<QString>
QString::toLower_helper
Record
OSV-2020-902
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
qt
OSS-Fuzz
Listed versions, plus commit ranges
qt-v5.0.0-alpha1v5.0.0v5.0.0-beta1v5.0.0-beta2v5.0.0-rc1
Show 45 moreShow less
v5.0.0-rc2v5.0.1v5.0.2v5.1.0v5.1.0-alpha1v5.1.0-beta1v5.1.0-rc1v5.1.0-rc2v5.1.1v5.10.0v5.10.0-alpha1v5.10.0-beta1v5.10.0-beta2v5.10.0-beta3v5.10.0-beta4v5.10.0-rc1v5.10.0-rc2v5.10.0-rc3v5.10.1v5.11.0v5.11.0-alpha1v5.11.0-beta1v5.11.0-beta2v5.11.0-beta3v5.11.0-beta4v5.11.0-rc1v5.11.0-rc2v5.11.1v5.11.2v5.11.3v5.12.0v5.12.0-alpha1v5.12.0-beta1v5.12.0-beta2v5.12.0-beta3v5.12.0-beta4v5.12.0-rc1v5.12.0-rc2v5.12.1v5.12.2v5.12.3v5.12.4v5.12.5v5.12.6v5.12.7
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2020-902 is a vulnerability with no CVSS score yet in qt, published July 21, 2020. No source lists public exploit code. A source reports a fix.

References

This page doesn't list everything

Left out here: 108 versions. The JSON record has them.

MoveEnter Open