CVE-2020-24742: Qt

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

An issue has been fixed in Qt versions 5.14.0 where QPluginLoader attempts to load plugins relative to the working directory, allowing attackers to execute arbitrary code via crafted files.

Affected products

• Qt Qt: from 5.6.0, before 5.12.7 (fixed in 5.12.7); from 5.13.0, up to and including 5.13.2

Published 2021-08-09. Last modified 2026-10-08.