CVE-2023-24607: High severity Qt QT vulnerability
Published Apr 15, 2023
·Updated
Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3.
Affected Software
3 affected components
Qt QT>=5.0.0<5.15.13
Qt QT>=6.0.0<6.2.8
Qt QT>=6.3.0<6.4.3
Remediation
Event History
Apr 15, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Jan 30, 2026
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this Qt vulnerability?
The vulnerability ID for this Qt vulnerability is CVE-2023-24607.
2
What is the severity of CVE-2023-24607?
The severity of CVE-2023-24607 is high with a CVSS score of 7.5.
3
How does CVE-2023-24607 result in a denial of service?
CVE-2023-24607 results in a denial of service by exploiting a crafted string when the SQL ODBC driver plugin is used.
4
Which versions of Qt are affected by CVE-2023-24607?
Versions 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3 of Qt are affected by CVE-2023-24607.
5
Are there any fixes available for CVE-2023-24607?
Yes, the fix for CVE-2023-24607 is available in Qt version 6.4.3.