CVE Catalog
CVE-2023-33285
MediumCVSS 5.3Exploitation Probability (EPSS)
Elevated risk0.81%
52th percentile - higher than 52% of all known CVEs
Summary
An issue was discovered in Qt versions 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1 related to QDnsLookup, allowing for a buffer over-read via a crafted reply from a DNS server.
Risk Assessment
An attacker could exploit this vulnerability to read memory data, potentially leading to the disclosure of sensitive information or application instability.
Recommendation
It is recommended to upgrade to Qt versions 5.15.14, 6.2.9, or 6.5.1 to mitigate this vulnerability.
Original NVD description (English source)
An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server.