CVE-2018-21035

PoC —

CVSS 3.1

7.5 high

EPSS

2%p83

Published

Feb 28, 2020 (Feb 28, 2020)

Modified

Jun 17, 2026

Description

In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service (memory consumption).

Vendors: qt
Products: qt
Weakness: CWE-770
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (2.3%)

In the news0 stories

No ingested article mentions this CVE yet.