{"id":"CVE-2023-43114","details":"An issue was discovered in Qt before 5.15.16, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3 on Windows. When using the GDI font engine, if a corrupted font is loaded via QFontDatabase::addApplicationFont{FromData], then it can cause the application to crash because of missing length checks.","modified":"2026-08-18T16:55:16.311717Z","published":"2023-09-18T00:00:00Z","related":["openSUSE-SU-2024:13308-1"],"database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/43xxx/CVE-2023-43114.json","unresolved_ranges":[{"source":"DESCRIPTION","extracted_events":[{"fixed":"5.15.16"},{"introduced":"6.x"},{"fixed":"6.2.10"},{"introduced":"6.3.x"},{"fixed":"6.5.x"},{"fixed":"6.5.3"}]}]},"references":[{"type":"WEB","url":"https://codereview.qt-project.org/c/qt/qtbase/+/503026"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/43xxx/CVE-2023-43114.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-43114"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/qt/qt5","events":[{"introduced":"0"},{"fixed":"a3229832677a474040fae017a35929f6f110336e"},{"introduced":"78410d7e8b7aafdcbb4feea3a943038c7e0a0b5f"},{"fixed":"0c6cbc73d189c662eb969025855da72eed85c2c3"},{"introduced":"477af4ee90b8611e3542f0bec3db39e549d14b7b"},{"fixed":"c0f82c61815a1d503b018d61b7c931ccf0139a5c"}],"database_specific":{"cpe":"cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"5.15.16"},{"introduced":"6.0.0"},{"fixed":"6.2.10"},{"introduced":"6.5.0"},{"fixed":"6.5.3"}],"source":"CPE_RANGE"}}],"versions":["v5.15.15-lts-lgpl","v6.2.9-lts-lgpl","v5.15.14-lts-lgpl","v6.2.8-lts-lgpl","v5.15.13-lts-lgpl","v6.2.7-lts-lgpl","v5.15.12-lts-lgpl","v5.15.11-lts-lgpl","v6.2.6-lts-lgpl","v5.15.10-lts-lgpl","v6.2.5-lts-lgpl","v5.15.9-lts-lgpl","v5.15.8-lts-lgpl","v6.5.0-beta3","v6.5.0-beta2","v5.15.7-lts-lgpl","v6.5.0-beta1","v5.15.6-lts-lgpl","v5.15.5-lts-lgpl","v5.15.4-lts-lgpl","v5.15.3-lts-lgpl","v6.2.0-beta4","v6.2.0-beta3","v6.2.0-beta2","v6.2.0-beta1","v6.2.0-alpha1","v6.0.0-beta5","v6.0.0-beta4","v6.0.0-beta3","v6.0.0-beta2","v6.0.0-beta1","v6.0.0-alpha1","v5.15.0-beta4","v5.15.0-beta3","v5.15.0-beta2","v5.15.0-beta1","v5.15.0-alpha1","v5.0.0-beta1"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-43114.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/qt/qtbase","events":[{"introduced":"0"},{"fixed":"8ad94db938533e1b7a96f9baddffbcdbae6909d3"},{"introduced":"fc9cda5f08ac848e88f63dd4a07c08b2fbc6bf17"},{"fixed":"017d80e12fa50c50fa6751a039d3a7c9e799f34c"},{"introduced":"aea92807be2567c4212b96ae67de7137075ba4ee"},{"fixed":"372eaedc5b8c771c46acc4c96e91bbade4ca3624"}],"database_specific":{"source":"CPE_RANGE","cpe":"cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"5.15.16"},{"introduced":"6.0.0"},{"fixed":"6.2.10"},{"introduced":"6.5.0"},{"fixed":"6.5.3"}]}}],"versions":["v5.15.15-lts-lgpl","v6.2.9-lts-lgpl","v5.15.14-lts-lgpl","v6.2.8-lts-lgpl","v5.15.13-lts-lgpl","v6.2.7-lts-lgpl","v5.15.12-lts-lgpl","v5.15.11-lts-lgpl","v6.2.6-lts-lgpl","v5.15.10-lts-lgpl","v5.15.9-lts-lgpl","v5.15.8-lts-lgpl","v6.2.5-lts-lgpl","v6.5.0-beta3","v6.5.0-beta2","v6.5.0-beta1","v5.15.7-lts-lgpl","v5.15.6-lts-lgpl","v5.15.5-lts-lgpl","v5.15.4-lts-lgpl","v5.15.3-lts-lgpl","v6.2.0-beta4","v6.2.0-beta3","v6.2.0-beta2","v6.2.0-beta1","v6.2.0-alpha1","v6.0.0-beta5","v6.0.0-beta4","v6.0.0-beta3","v6.0.0-beta2","v6.0.0-beta1","v6.0.0-alpha1","v5.15.0-beta4","v5.15.0-beta3","v5.15.0-beta2","v5.15.0-beta1","v5.15.0-alpha1","v5.0.0-beta2","v5.0.0-beta1"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-43114.json","vanir_signatures_modified":"2026-08-18T16:55:16Z","vanir_signatures":[{"digest":{"function_hash":"38259293548902737777275712752331343392","length":1886},"id":"CVE-2023-43114-13167ccd","signature_type":"Function","signature_version":"v1","source":"https://github.com/qt/qtbase/commit/372eaedc5b8c771c46acc4c96e91bbade4ca3624","target":{"file":"src/corelib/itemmodels/qitemselectionmodel.cpp","function":"QItemSelectionModelPrivate::initModel"},"deprecated":false},{"target":{"file":"src/corelib/itemmodels/qitemselectionmodel.cpp"},"deprecated":false,"digest":{"line_hashes":["87361980673766272267219738812171569415","205524495854561398802234511811516116091","196697108956812034362302347937410944742","61748281403189272026466914579964218575","86554005527345536180803463393829569588","138972697849049708373997816242949305863","39658990249987524557285517040476549389","91037344694848986727600386580410212812","85752268986580132659688941271689316652","293640252404270675870626936474950913553","184571535668388517638634745445475766913","35388671131273319527596436102983390680","284303280828705192729204731703242024651","316507940730145078340475632468012846228"],"threshold":0.9},"id":"CVE-2023-43114-33ee196f","signature_type":"Line","signature_version":"v1","source":"https://github.com/qt/qtbase/commit/372eaedc5b8c771c46acc4c96e91bbade4ca3624"},{"id":"CVE-2023-43114-67669c6f","signature_type":"Function","signature_version":"v1","source":"https://github.com/qt/qtbase/commit/372eaedc5b8c771c46acc4c96e91bbade4ca3624","target":{"file":"src/corelib/itemmodels/qitemselectionmodel.cpp","function":"QItemSelectionModelPrivate::disconnectModel"},"deprecated":false,"digest":{"function_hash":"153772929723627036583640333571744381705","length":239}},{"id":"CVE-2023-43114-840f43c8","signature_type":"Line","signature_version":"v1","source":"https://github.com/qt/qtbase/commit/372eaedc5b8c771c46acc4c96e91bbade4ca3624","target":{"file":"tests/auto/corelib/itemmodels/qitemselectionmodel/tst_qitemselectionmodel.cpp"},"deprecated":false,"digest":{"line_hashes":["288006492465818663008628430064770650281","20574375947787686126921422720784265935","168486689155343824614617482142165887338","237927361158180293105380322227781034941","91048025042654194263877087798053120381","231480675520447089506303661913067745474"],"threshold":0.9}}]}}],"schema_version":"1.9.0"}