CVE-2020-24742

—

CVSS 3.1

7.8 high

EPSS

1%p65

Published

Aug 9, 2021 (Aug 9, 2021)

Modified

Jun 17, 2026

Description

An issue has been fixed in Qt versions 5.14.0 where QPluginLoader attempts to load plugins relative to the working directory, allowing attackers to execute arbitrary code via crafted files.

Vendors: qt
Products: qt
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.