What’s Vulnerable › Vulnerabilities

CVE-2018-19872

• Severity: medium (CVSS 5.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-03-21 · updated 2026-06-17
• Weakness: CWE-369

Description

An issue was discovered in Qt 5.11. A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp.

Affected products

• Fedoraproject Fedora: 28, 29, 30
• openSUSE Leap: 15.0
• Qt: 5.11.0

References

• http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00080.html
• https://bugreports.qt.io/browse/QTBUG-69449
• https://lists.debian.org/debian-lts-announce/2020/09/msg00023.html
• https://lists.debian.org/debian-lts-announce/2020/09/msg00024.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2C5FHCR4A636BLTAXL76WWDJLOAHGNYG/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FO7IBY7YYKNMRD5OI3JNNUI42WEM7NUV/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XS6G3ZDFCHWFQD4CFXWFPHREOHBBDTD7/
• https://usn.ubuntu.com/4275-1/
• http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00080.html
• https://bugreports.qt.io/browse/QTBUG-69449

Get alerted when CVE-2018-19872 or the next vulnerability affects your stack