Qt 4.8.5

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:qt:qt:4.8.5:*:*:*:*:*:*:*

part: a version: 4.8.5 update: *

VendorQt (ac351d54-6a3a-5b90-a60b-6ef58ef23803)
ProductQt (fb46f139-0d7d-5cf6-a2f2-b5bc72f4c130)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/qtbase5-dev purl2cpe 2026-06-01 10:16:55.734944
pkg:deb/ubuntu/qtbase5-dev purl2cpe 2026-06-01 10:16:55.734945
pkg:github/qt/qt purl2cpe 2026-06-01 10:16:55.734947
pkg:github/qt/qt5 purl2cpe 2026-06-01 10:16:55.734948
pkg:qt/qt purl2cpe 2026-06-01 10:16:55.734950
pkg:rpm/fedora/qt5-qtbase purl2cpe 2026-06-01 10:16:55.734951
pkg:rpm/opensuse/qt5-qtbase purl2cpe 2026-06-01 10:16:55.734952

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-4422 not_vulnerable 2026-06-08 05:04:36.141109 Details available
SQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, allows remote attackers to execute arbitrary SQL commands via a \ (backslash) in a message.
Published: 2013-10-23T15:00:00.000Z
Updated: 2024-08-06T16:45:13.900Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0254 vulnerable 2026-06-08 05:03:46.518436 Details available
The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions (world-readable and world-writable) for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrated by reading a pixmap being sent to an X server.
Published: 2013-02-06T11:00:00.000Z
Updated: 2024-08-06T14:18:09.656Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.