Every CVE Search/ Get API key

CVE-2013-0254

The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions...

3.6 LowFix available

CVE-2013-0254 is a low vulnerability (CVSS 3.6) in Qt, published February 6, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in qt4-x11 4:4.6.3-4+squeeze3.

The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions (world-readable and world-writable) for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrated by reading a pixmap being sent to an X server.

Exploit likelihood

0.43%Down 0.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 3.6

The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions (world-readable and world-writable) for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrated by reading a pixmap being sent to an X server.

Record
CVE-2013-0254
CVSS 2.0
3.6 LowAV:L/AC:L/Au:N/C:P/I:P/A:N
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions (world-readable and world-writable) for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrated by reading a pixmap being sent to an X server.

Record
CVE-2013-0254
Updated
2026-11-02
EUVDEUVD-2013-0285 No score

The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions (world-readable and world-writable) for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrated by reading a pixmap being sent to an X server.

Record
EUVD-2013-0285
Updated
2026-11-03
GitHub AdvisoriesGHSA-g639-7h38-4849 No score

The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions...

The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions (world-readable and world-writable) for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrated by reading a pixmap being sent to an X server.

Record
GHSA-g639-7h38-4849
Updated
2026-11-02
OSVopenSUSE-SU-2024:10180-1 No score

libqt4-32bit-4.8.7-5.4 on GA media

These are all security issues fixed in the libqt4-32bit-4.8.7-5.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10180-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
qt4-x11
Debian:6.0
before 4:4.6.3-4+squeeze3, plus listed versions
4:4.6.3-44:4.6.3-4+squeeze14:4.6.3-4+squeeze2
4:4.6.3-4+squeeze3
phonon-backend-gstreamer
Red Hat:enterprise_linux:6::client
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt
Red Hat:enterprise_linux:6::client
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-debuginfo
Red Hat:enterprise_linux:6::client
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-mysql
Red Hat:enterprise_linux:6::client
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-odbc
Red Hat:enterprise_linux:6::client
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-postgresql
Red Hat:enterprise_linux:6::client
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-sqlite
Red Hat:enterprise_linux:6::client
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-x11
Red Hat:enterprise_linux:6::client
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-demos
Red Hat:enterprise_linux:6::client
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
Show 39 moreShow less
Affected packages
PackageAffectedFixed
qt-devel
Red Hat:enterprise_linux:6::client
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-doc
Red Hat:enterprise_linux:6::client
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-examples
Red Hat:enterprise_linux:6::client
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
phonon-backend-gstreamer
Red Hat:enterprise_linux:6::computenode
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt
Red Hat:enterprise_linux:6::computenode
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-debuginfo
Red Hat:enterprise_linux:6::computenode
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-sqlite
Red Hat:enterprise_linux:6::computenode
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-x11
Red Hat:enterprise_linux:6::computenode
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-demos
Red Hat:enterprise_linux:6::computenode
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-devel
Red Hat:enterprise_linux:6::computenode
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-doc
Red Hat:enterprise_linux:6::computenode
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-examples
Red Hat:enterprise_linux:6::computenode
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-mysql
Red Hat:enterprise_linux:6::computenode
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-odbc
Red Hat:enterprise_linux:6::computenode
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-postgresql
Red Hat:enterprise_linux:6::computenode
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
phonon-backend-gstreamer
Red Hat:enterprise_linux:6::server
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt
Red Hat:enterprise_linux:6::server
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-debuginfo
Red Hat:enterprise_linux:6::server
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-devel
Red Hat:enterprise_linux:6::server
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-doc
Red Hat:enterprise_linux:6::server
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-mysql
Red Hat:enterprise_linux:6::server
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-odbc
Red Hat:enterprise_linux:6::server
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-postgresql
Red Hat:enterprise_linux:6::server
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-sqlite
Red Hat:enterprise_linux:6::server
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-x11
Red Hat:enterprise_linux:6::server
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-demos
Red Hat:enterprise_linux:6::server
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-examples
Red Hat:enterprise_linux:6::server
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
phonon-backend-gstreamer
Red Hat:enterprise_linux:6::workstation
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt
Red Hat:enterprise_linux:6::workstation
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-debuginfo
Red Hat:enterprise_linux:6::workstation
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-devel
Red Hat:enterprise_linux:6::workstation
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-doc
Red Hat:enterprise_linux:6::workstation
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-mysql
Red Hat:enterprise_linux:6::workstation
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-odbc
Red Hat:enterprise_linux:6::workstation
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-postgresql
Red Hat:enterprise_linux:6::workstation
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-sqlite
Red Hat:enterprise_linux:6::workstation
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-x11
Red Hat:enterprise_linux:6::workstation
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-demos
Red Hat:enterprise_linux:6::workstation
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4
qt-examples
Red Hat:enterprise_linux:6::workstation
before 1:4.6.2-26.el6_4
1:4.6.2-26.el6_4

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 19 moreShow less
MoveEnter Open