qt5-qtbase: buffer over-read in read_xbm_body in gui/image/qxbmhandler.cpp (CVE-2020-17507)

An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1. read_xbm_body in gui/image/qxbmhandler.cpp has a buffer over-read.

Reference:

https://nvd.nist.gov/vuln/detail/CVE-2020-17507

Affected branches:

master
3.12-stable

Edited Aug 18, 2020 by Rasmus Thomsen

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information