# CVE-2018-15518: libqt5test5: QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML...

CVE-2018-15518 is fixed in 46 products on 1 platform, first by libqt5concurrent5 5.9.5+dfsg-0ubuntu2.1, released December 25, 2018. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2018-15518
- Priority: High
- CVSS: 8.8 (Medium)
- EPSS: 0.0250
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Dec 25, 2018

## Description

QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | libqt5concurrent5 Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | [libqt5concurrent5 5.9.5+dfsg-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libqt5concurrent5-5.9.5-dfsg-0ubuntu2.1.md) | Dec 25, 2018 |
| Linux | libqt5core5a Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | [libqt5core5a 5.9.5+dfsg-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libqt5core5a-5.9.5-dfsg-0ubuntu2.1.md) | Dec 25, 2018 |
| Linux | libqt5dbus5 Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | [libqt5dbus5 5.9.5+dfsg-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libqt5dbus5-5.9.5-dfsg-0ubuntu2.1.md) | Dec 25, 2018 |
| Linux | libqt5gui5 Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | [libqt5gui5 5.9.5+dfsg-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libqt5gui5-5.9.5-dfsg-0ubuntu2.1.md) | Dec 25, 2018 |
| Linux | libqt5network5 Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | [libqt5network5 5.9.5+dfsg-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libqt5network5-5.9.5-dfsg-0ubuntu2.1.md) | Dec 25, 2018 |
| Linux | libqt5opengl5 Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | [libqt5opengl5 5.9.5+dfsg-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libqt5opengl5-5.9.5-dfsg-0ubuntu2.1.md) | Dec 25, 2018 |
| Linux | libqt5printsupport5 Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | [libqt5printsupport5 5.9.5+dfsg-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libqt5printsupport5-5.9.5-dfsg-0ubuntu2.1.md) | Dec 25, 2018 |
| Linux | libqt5sql5 Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | [libqt5sql5 5.9.5+dfsg-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libqt5sql5-5.9.5-dfsg-0ubuntu2.1.md) | Dec 25, 2018 |
| Linux | libqt5sql5-ibase Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | [libqt5sql5-ibase 5.9.5+dfsg-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libqt5sql5-ibase-5.9.5-dfsg-0ubuntu2.1.md) | Dec 25, 2018 |
| Linux | libqt5sql5-mysql Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | [libqt5sql5-mysql 5.9.5+dfsg-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libqt5sql5-mysql-5.9.5-dfsg-0ubuntu2.1.md) | Dec 25, 2018 |
| Linux | libqt5sql5-odbc Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | [libqt5sql5-odbc 5.9.5+dfsg-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libqt5sql5-odbc-5.9.5-dfsg-0ubuntu2.1.md) | Dec 25, 2018 |
| Linux | libqt5sql5-psql Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | [libqt5sql5-psql 5.9.5+dfsg-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libqt5sql5-psql-5.9.5-dfsg-0ubuntu2.1.md) | Dec 25, 2018 |
| Linux | libqt5sql5-sqlite Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | [libqt5sql5-sqlite 5.9.5+dfsg-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libqt5sql5-sqlite-5.9.5-dfsg-0ubuntu2.1.md) | Dec 25, 2018 |
| Linux | libqt5sql5-tds Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | [libqt5sql5-tds 5.9.5+dfsg-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libqt5sql5-tds-5.9.5-dfsg-0ubuntu2.1.md) | Dec 25, 2018 |
| Linux | libqt5test5 Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | [libqt5test5 5.9.5+dfsg-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libqt5test5-5.9.5-dfsg-0ubuntu2.1.md) | Dec 25, 2018 |
| Linux | libqt5widgets5 Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | [libqt5widgets5 5.9.5+dfsg-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libqt5widgets5-5.9.5-dfsg-0ubuntu2.1.md) | Dec 25, 2018 |
| Linux | libqt5xml5 Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | [libqt5xml5 5.9.5+dfsg-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libqt5xml5-5.9.5-dfsg-0ubuntu2.1.md) | Dec 25, 2018 |
| Linux | qt5-assistant RHEL 8 | 0:5.11.1-9.el8 | [RHSA-2019:3390](https://patchblox.com/security/data/fix/linux/rhsa-2019-3390.md) | Nov 5, 2019 |
| Linux | qt5-assistant ol 8 | 0:5.11.1-9.el8 | [ELSA-2019-3390](https://patchblox.com/security/data/fix/linux/elsa-2019-3390.md) | Nov 14, 2019 |
| Linux | qt5-default Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | [qt5-default 5.9.5+dfsg-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qt5-default-5.9.5-dfsg-0ubuntu2.1.md) | Dec 25, 2018 |
| Linux | qt5-designer RHEL 8 | 0:5.11.1-9.el8 | [RHSA-2019:3390](https://patchblox.com/security/data/fix/linux/rhsa-2019-3390.md) | Nov 5, 2019 |
| Linux | qt5-designer ol 8 | 0:5.11.1-9.el8 | [ELSA-2019-3390](https://patchblox.com/security/data/fix/linux/elsa-2019-3390.md) | Nov 14, 2019 |
| Linux | qt5-doctools RHEL 8 | 0:5.11.1-9.el8 | [RHSA-2019:3390](https://patchblox.com/security/data/fix/linux/rhsa-2019-3390.md) | Nov 5, 2019 |
| Linux | qt5-doctools ol 8 | 0:5.11.1-9.el8 | [ELSA-2019-3390](https://patchblox.com/security/data/fix/linux/elsa-2019-3390.md) | Nov 14, 2019 |
| Linux | qt5-gtk-platformtheme Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | [qt5-gtk-platformtheme 5.9.5+dfsg-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qt5-gtk-platformtheme-5.9.5-dfsg-0ubuntu2.1.md) | Dec 25, 2018 |
| Linux | qt5-linguist RHEL 8 | 0:5.11.1-9.el8 | [RHSA-2019:3390](https://patchblox.com/security/data/fix/linux/rhsa-2019-3390.md) | Nov 5, 2019 |
| Linux | qt5-linguist ol 8 | 0:5.11.1-9.el8 | [ELSA-2019-3390](https://patchblox.com/security/data/fix/linux/elsa-2019-3390.md) | Nov 14, 2019 |
| Linux | qt5-qdbusviewer RHEL 8 | 0:5.11.1-9.el8 | [RHSA-2019:3390](https://patchblox.com/security/data/fix/linux/rhsa-2019-3390.md) | Nov 5, 2019 |
| Linux | qt5-qdbusviewer ol 8 | 0:5.11.1-9.el8 | [ELSA-2019-3390](https://patchblox.com/security/data/fix/linux/elsa-2019-3390.md) | Nov 14, 2019 |
| Linux | qt5-qmake Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | [qt5-qmake 5.9.5+dfsg-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qt5-qmake-5.9.5-dfsg-0ubuntu2.1.md) | Dec 25, 2018 |
| Linux | qt5-qmake-bin Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | [qt5-qmake-bin 5.9.5+dfsg-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qt5-qmake-bin-5.9.5-dfsg-0ubuntu2.1.md) | Dec 25, 2018 |
| Linux | qt5-qtbase RHEL 8 | 0:5.11.1-7.el8 | [RHSA-2019:3390](https://patchblox.com/security/data/fix/linux/rhsa-2019-3390.md) | Nov 5, 2019 |
| Linux | qt5-qtbase ol 8 | 0:5.11.1-7.el8 | [ELSA-2019-3390](https://patchblox.com/security/data/fix/linux/elsa-2019-3390.md) | Nov 14, 2019 |
| Linux | qt5-qtbase-common RHEL 8 | 0:5.11.1-7.el8 | [RHSA-2019:3390](https://patchblox.com/security/data/fix/linux/rhsa-2019-3390.md) | Nov 5, 2019 |
| Linux | qt5-qtbase-common ol 8 | 0:5.11.1-7.el8 | [ELSA-2019-3390](https://patchblox.com/security/data/fix/linux/elsa-2019-3390.md) | Nov 14, 2019 |
| Linux | qt5-qtbase-devel RHEL 8 | 0:5.11.1-7.el8 | [RHSA-2019:3390](https://patchblox.com/security/data/fix/linux/rhsa-2019-3390.md) | Nov 5, 2019 |
| Linux | qt5-qtbase-devel ol 8 | 0:5.11.1-7.el8 | [ELSA-2019-3390](https://patchblox.com/security/data/fix/linux/elsa-2019-3390.md) | Nov 14, 2019 |
| Linux | qt5-qtbase-examples RHEL 8 | 0:5.11.1-7.el8 | [RHSA-2019:3390](https://patchblox.com/security/data/fix/linux/rhsa-2019-3390.md) | Nov 5, 2019 |
| Linux | qt5-qtbase-examples ol 8 | 0:5.11.1-7.el8 | [ELSA-2019-3390](https://patchblox.com/security/data/fix/linux/elsa-2019-3390.md) | Nov 14, 2019 |
| Linux | qt5-qtbase-gui RHEL 8 | 0:5.11.1-7.el8 | [RHSA-2019:3390](https://patchblox.com/security/data/fix/linux/rhsa-2019-3390.md) | Nov 5, 2019 |
| Linux | qt5-qtbase-gui ol 8 | 0:5.11.1-7.el8 | [ELSA-2019-3390](https://patchblox.com/security/data/fix/linux/elsa-2019-3390.md) | Nov 14, 2019 |
| Linux | qt5-qtbase-mysql RHEL 8 | 0:5.11.1-7.el8 | [RHSA-2019:3390](https://patchblox.com/security/data/fix/linux/rhsa-2019-3390.md) | Nov 5, 2019 |
| Linux | qt5-qtbase-mysql ol 8 | 0:5.11.1-7.el8 | [ELSA-2019-3390](https://patchblox.com/security/data/fix/linux/elsa-2019-3390.md) | Nov 14, 2019 |
| Linux | qt5-qtbase-odbc RHEL 8 | 0:5.11.1-7.el8 | [RHSA-2019:3390](https://patchblox.com/security/data/fix/linux/rhsa-2019-3390.md) | Nov 5, 2019 |
| Linux | qt5-qtbase-odbc ol 8 | 0:5.11.1-7.el8 | [ELSA-2019-3390](https://patchblox.com/security/data/fix/linux/elsa-2019-3390.md) | Nov 14, 2019 |
| Linux | qt5-qtbase-postgresql RHEL 8 | 0:5.11.1-7.el8 | [RHSA-2019:3390](https://patchblox.com/security/data/fix/linux/rhsa-2019-3390.md) | Nov 5, 2019 |
| Linux | qt5-qtbase-postgresql ol 8 | 0:5.11.1-7.el8 | [ELSA-2019-3390](https://patchblox.com/security/data/fix/linux/elsa-2019-3390.md) | Nov 14, 2019 |
| Linux | qt5-qtbase-static RHEL 8 | 0:5.11.1-7.el8 | [RHSA-2019:3390](https://patchblox.com/security/data/fix/linux/rhsa-2019-3390.md) | Nov 5, 2019 |
| Linux | qt5-qtbase-static ol 8 | 0:5.11.1-7.el8 | [ELSA-2019-3390](https://patchblox.com/security/data/fix/linux/elsa-2019-3390.md) | Nov 14, 2019 |
| Linux | qt5-qttools RHEL 8 | 0:5.11.1-9.el8 | [RHSA-2019:3390](https://patchblox.com/security/data/fix/linux/rhsa-2019-3390.md) | Nov 5, 2019 |
| Linux | qt5-qttools ol 8 | 0:5.11.1-9.el8 | [ELSA-2019-3390](https://patchblox.com/security/data/fix/linux/elsa-2019-3390.md) | Nov 14, 2019 |
| Linux | qt5-qttools-common RHEL 8 | 0:5.11.1-9.el8 | [RHSA-2019:3390](https://patchblox.com/security/data/fix/linux/rhsa-2019-3390.md) | Nov 5, 2019 |
| Linux | qt5-qttools-common ol 8 | 0:5.11.1-9.el8 | [ELSA-2019-3390](https://patchblox.com/security/data/fix/linux/elsa-2019-3390.md) | Nov 14, 2019 |
| Linux | qt5-qttools-devel RHEL 8 | 0:5.11.1-9.el8 | [RHSA-2019:3390](https://patchblox.com/security/data/fix/linux/rhsa-2019-3390.md) | Nov 5, 2019 |
| Linux | qt5-qttools-devel ol 8 | 0:5.11.1-9.el8 | [ELSA-2019-3390](https://patchblox.com/security/data/fix/linux/elsa-2019-3390.md) | Nov 14, 2019 |
| Linux | qt5-qttools-examples RHEL 8 | 0:5.11.1-9.el8 | [RHSA-2019:3390](https://patchblox.com/security/data/fix/linux/rhsa-2019-3390.md) | Nov 5, 2019 |
| Linux | qt5-qttools-examples ol 8 | 0:5.11.1-9.el8 | [ELSA-2019-3390](https://patchblox.com/security/data/fix/linux/elsa-2019-3390.md) | Nov 14, 2019 |
| Linux | qt5-qttools-libs-designer RHEL 8 | 0:5.11.1-9.el8 | [RHSA-2019:3390](https://patchblox.com/security/data/fix/linux/rhsa-2019-3390.md) | Nov 5, 2019 |
| Linux | qt5-qttools-libs-designer ol 8 | 0:5.11.1-9.el8 | [ELSA-2019-3390](https://patchblox.com/security/data/fix/linux/elsa-2019-3390.md) | Nov 14, 2019 |
| Linux | qt5-qttools-libs-designercomponents RHEL 8 | 0:5.11.1-9.el8 | [RHSA-2019:3390](https://patchblox.com/security/data/fix/linux/rhsa-2019-3390.md) | Nov 5, 2019 |
| Linux | qt5-qttools-libs-designercomponents ol 8 | 0:5.11.1-9.el8 | [ELSA-2019-3390](https://patchblox.com/security/data/fix/linux/elsa-2019-3390.md) | Nov 14, 2019 |
| Linux | qt5-qttools-libs-help RHEL 8 | 0:5.11.1-9.el8 | [RHSA-2019:3390](https://patchblox.com/security/data/fix/linux/rhsa-2019-3390.md) | Nov 5, 2019 |
| Linux | qt5-qttools-libs-help ol 8 | 0:5.11.1-9.el8 | [ELSA-2019-3390](https://patchblox.com/security/data/fix/linux/elsa-2019-3390.md) | Nov 14, 2019 |
| Linux | qt5-qttools-static RHEL 8 | 0:5.11.1-9.el8 | [RHSA-2019:3390](https://patchblox.com/security/data/fix/linux/rhsa-2019-3390.md) | Nov 5, 2019 |
| Linux | qt5-qttools-static ol 8 | 0:5.11.1-9.el8 | [ELSA-2019-3390](https://patchblox.com/security/data/fix/linux/elsa-2019-3390.md) | Nov 14, 2019 |
| Linux | qtbase5-dev-tools Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | [qtbase5-dev-tools 5.9.5+dfsg-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qtbase5-dev-tools-5.9.5-dfsg-0ubuntu2.1.md) | Dec 25, 2018 |
| Linux | qtbase5-doc-html Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | [qtbase5-doc-html 5.9.5+dfsg-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qtbase5-doc-html-5.9.5-dfsg-0ubuntu2.1.md) | Dec 25, 2018 |
| Linux | qtbase5-examples Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | [qtbase5-examples 5.9.5+dfsg-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qtbase5-examples-5.9.5-dfsg-0ubuntu2.1.md) | Dec 25, 2018 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo