A vulnerability has been identified in the Qt library (CVE-2023-51714) in its implementation of the HTTP/2 protocol, allowing data to be written beyond the allocated buffer. This vulnerability is caused by an integer overflow in the code parsing packed headers (HPack) and manifests when receiving more than 4 GB of total HTTP header data or 2 GB for a single header. The issue has been addressed in updates to Qt 5.15.17, 6.2.11, 6.5.4, and 6.6.2.
Source: opennet.ru
