CVE-2022-43591: Qt

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

A buffer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted javascript code can trigger an out-of-bounds memory access, which can lead to arbitrary code execution. Target application would need to access a malicious web page to trigger this vulnerability.

Affected products

• Qt Qt: version 6.3.2 only

Published 2023-01-12. Last modified 2026-06-17.