CVE-2020-0570

HighCVSS 7.3/10Last modified Oct 8, 2026

Description

Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-426

Affected software

Vendor	Product	Versions
n/a	QT Library	Fixed in qt 5.14.0, qt 5.12.7, qt 5.9.10

References

https://bugreports.qt.io/browse/QTBUG-81272Exploit, Patch, Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1800604Issue Tracking, Patch, Third Party Advisory
https://lists.qt-project.org/pipermail/development/2020-January/038534.htmlMailing List, Vendor Advisory
https://bugreports.qt.io/browse/QTBUG-81272Exploit, Patch, Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1800604Issue Tracking, Patch, Third Party Advisory
https://lists.qt-project.org/pipermail/development/2020-January/038534.htmlMailing List, Vendor Advisory

Timeline

Published: Sep 14, 2020
Last modified: Oct 8, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-05715.5Improper conditions check in BIOS firmware for 8th Generation Intel(R) Core(TM) Processors and Intel(R) Pentium(R) Silver Processor Series m CVE-2020-05726.7Improper input validation in the firmware for Intel(R) Server Board S2600ST and S2600WF families may allow a privileged user to potentially CVE-2020-05735.5Out of bounds read in the Intel CSI2 Host Controller driver may allow an authenticated user to potentially enable information disclosure via CVE-2020-05745.9Improper configuration in block design for Intel(R) MAX(R) 10 FPGA all versions may allow an authenticated user to potentially enable escala CVE-2020-05755.5Improper buffer restrictions in the Intel(R) Unite Client for Windows* before version 4.2.13064 may allow an authenticated user to potential CVE-2020-05766.5Buffer overflow in Intel(R) Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable denial of ser CVE-2020-05778.8Insufficient control flow for Intel(R) Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable es CVE-2020-05788.8Improper conditions check for Intel(R) Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable es CVE-2020-05838.8Improper access control in the subsystem for Intel(R) Smart Sound Technology may allow an authenticated user to potentially enable escalatio CVE-2020-05846.2Buffer overflow in firmware for Intel(R) SSD DC P4800X and P4801X Series, Intel(R) Optane(TM) SSD 900P and 905P Series may allow an unauthen CVE-2020-05867.8Improper initialization in subsystem for Intel(R) SPS versions before SPS_E3_04.01.04.109.0 and SPS_E3_04.08.04.070.0 may allow an authentic CVE-2020-05876.7Improper conditions check in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of priv