Cyber Resilience

CVE-2023-32762

Qt 5.9.0 – 5.15.14

Published
28 May 2023
Modified
05 March 2025
Patch / advisory
View advisory
CVSS Score v3.1 5.3
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS Score 0.0088 56th percentile
Risk Priority 46 floored blend · peak EPSS

Summary

CVE-2023-32762 is a medium-severity an unspecified weakness vulnerability in Qt Qt. Its CVSS base score is 5.3 (Medium).

Operationally, ranked in the top 44% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly prohibited by the server. This happens…

more

if the case used for this header does not exactly match.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2023-37369Same product: Debian Debian Linux
CVE-2023-51714Same product: Debian Debian Linux
CVE-2023-34410Same product: Debian Debian Linux
CVE-2023-33285Same product: Qt Qt
CVE-2024-25580Same product: Qt Qt
CVE-2023-32763Same product: Qt Qt
CVE-2025-5683Same product: Qt Qt
CVE-2023-38197Same product: Qt Qt
CVE-2024-39936Same product: Qt Qt
CVE-2025-30348Same product: Qt Qt

Affected Assets

debian
debian linux
10.0
qt
qt
5.9.0 — 5.15.14 · 6.0.0 — 6.2.9 · 6.3.0 — 6.5.1

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References