CVE-2023-45935

Published: 27 March 2024

Qt 6 through 6.6 was discovered to contain a NULL pointer dereference via the function QXcbConnection::initializeAllAtoms(). NOTE: this is disputed because it is not expected that an X application should continue to run when there is arbitrary anomalous behavior from the X server.

Status

References

• http://seclists.org/fulldisclosure/2024/Jan/61
• https://www.cve.org/CVERecord?id=CVE-2023-45935
• NVD
• Launchpad
• Debian

Bugs

• https://bugreports.qt.io/browse/QTBUG-115599