Description (CNA)
QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and 6.8.2.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Qt / Qt | affected 0 before 5.15.19; affected 6.0.0 before 6.5.9; affected 6.6.0 before 6.8.2 |
CWE
CWE-125
References
- https://codereview.qt-project.org/q/QLowEnergyController
- https://www.qt.io/blog/security-advisory-qlowenergycontroller-on-linux
ADP enrichment
No English description supplied.
No references supplied.