CVE-2015-0295
No CVSS score yet. EPSS 6.1% chance of exploitation in the next 30 days.
The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
- EPSS
- 6.1% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
- CWE
- CWE-189
- Published
- Modified
- Record from
- the NVD, synced
Affected
- digia:qt
- fedoraproject:fedora
- opensuse:opensuse
References
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html