An out-of-bounds read vulnerability in the Qt CoAP message parsing…

What to know

What it is

An out-of-bounds read vulnerability in the Qt CoAP message parsing (QCoapInternalReply::createFromFrame()) of the Qt CoAP module. Processing a malformed CoAP message can cause an application using Qt CoAP to crash (loss of availability) or to continue operating on incorrect data (potential loss of integrity).

Affected

See advisory

Fix

Apply the vendor's security update; see the linked advisory.

Exploitation

No known exploitation