CVE-2018-15518

—

CVSS 3.0

8.8 high

EPSS

3%p84

Published

Dec 26, 2018 (Dec 26, 2018)

Modified

Jun 17, 2026

Description

QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.

Vendors: qt debian opensuse
Products: qt, debian linux, leap
Weakness: CWE-415
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.5%)

In the news0 stories

No ingested article mentions this CVE yet.