CVE-2022-32265: Qdecoder Project Qdecoder

Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days.

qDecoder before 12.1.0 does not ensure that the percent character is followed by two hex digits for URL decoding.

Affected products

• Qdecoder Project Qdecoder: before 12.1.0 (fixed in 12.1.0)

Published 2022-06-03. Last modified 2026-06-17.