Approved changes feed: RSS · Atom

cpe:2.3:a:installbuilder:installbuilder:*:*:*:*:*:qt:*:*

part: a version: * update: *

VendorInstallbuilder (b538e2f2-c2c7-58b1-93b9-8bc461c4bc68)
ProductInstallbuilder (321d1f84-eae5-5283-a821-502693b56e34)
Edition*
Language*
Software edition*
Target softwareqt
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-31694 vulnerable 2026-06-08 05:44:41.246199 Details available
InstallBuilder Qt installers built with versions previous to 22.10 try to load DLLs from the installer binary parent directory when displaying popups. This may allow an attacker to plant a malicious DLL in the installer parent directory to allow executing code with the privileges of the installer (when the popup triggers the loading of the library). Exploiting these type of vulnerabilities generally require that an attacker has access to a vulnerable machine to plant the malicious DLL.
Published: 2022-11-18T00:00:00.000Z
Updated: 2025-04-29T14:25:24.579Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3979 vulnerable 2026-06-08 05:25:58.513942 Details available
InstallBuilder for Qt Windows (versions prior to 20.7.0) installers look for plugins at a predictable location at initialization time, writable by non-admin users. While those plugins are not required, they are loaded if present, which could allow an attacker to plant a malicious library which could result in code execution with the security scope of the installer.
Published: 2020-09-18T17:37:00.000Z
Updated: 2024-08-04T07:52:20.546Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.